nyxora 26.7.2 → 26.7.4

package/dist/packages/core/src/web3/aggregator/providers/OpBridgeProvider.js

@@ -24,8 +24,9 @@ class OpBridgeProvider {
         return true;
     }
     supports(request) {
-        const isOpStack = request.toChain === 'optimism_sepolia' || request.toChain === 'base_sepolia';
-        if (request.fromChain !== 'sepolia' || !isOpStack)
+        const isL1ToL2 = request.fromChain === 'sepolia' && (request.toChain === 'optimism_sepolia' || request.toChain === 'base_sepolia');
+        const isL2ToL1 = request.toChain === 'sepolia' && (request.fromChain === 'optimism_sepolia' || request.fromChain === 'base_sepolia');
+        if (!isL1ToL2 && !isL2ToL1)
             return false;
         const isNative = request.fromToken.toLowerCase() === 'eth' ||
             request.fromToken.toLowerCase() === '0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee' ||
@@ -33,34 +34,47 @@ class OpBridgeProvider {
         return isNative;
     }
     async getQuote(request, context) {
-        // Each OP Stack L2 has its OWN L1StandardBridgeProxy on Sepolia L1
-        // Using the wrong address sends ETH to the wrong contract = loss of funds
-        const BRIDGE_ADDRESSES = {
-            optimism_sepolia: '0xFBb0621E0B23b5478B630BD55a5f21f67730B0F1', // Confirmed: OP Sepolia L1StandardBridgeProxy
-            base_sepolia: '0xfd0Bf71F60660E2f608ed56e1659C450eB113120', // Confirmed: Base Sepolia L1StandardBridgeProxy
-        };
-        const bridgeAddress = BRIDGE_ADDRESSES[request.toChain];
-        if (!bridgeAddress) {
-            throw new Error(`[OpBridgeProvider] No bridge address configured for destination chain: ${request.toChain}`);
+        const isL1ToL2 = request.fromChain === 'sepolia';
+        let bridgeAddress;
+        let callData;
+        if (isL1ToL2) {
+            // L1 to L2
+            const BRIDGE_ADDRESSES = {
+                optimism_sepolia: '0xFBb0621E0B23b5478B630BD55a5f21f67730B0F1',
+                base_sepolia: '0xfd0Bf71F60660E2f608ed56e1659C450eB113120',
+            };
+            bridgeAddress = BRIDGE_ADDRESSES[request.toChain];
+            if (!bridgeAddress) {
+                throw new Error(`[OpBridgeProvider] No bridge address configured for destination chain: ${request.toChain}`);
+            }
+            const depositEthAbi = (0, viem_1.parseAbi)([
+                'function depositETH(uint32 _minGasLimit, bytes _extraData) payable'
+            ]);
+            callData = (0, viem_1.encodeFunctionData)({
+                abi: depositEthAbi,
+                functionName: 'depositETH',
+                args: [200000, '0x']
+            });
+        }
+        else {
+            // L2 to L1
+            bridgeAddress = '0x4200000000000000000000000000000000000010'; // L2StandardBridge predeploy on OP Stack
+            const bridgeEthAbi = (0, viem_1.parseAbi)([
+                'function bridgeETH(uint32 _minGasLimit, bytes _extraData) payable'
+            ]);
+            callData = (0, viem_1.encodeFunctionData)({
+                abi: bridgeEthAbi,
+                functionName: 'bridgeETH',
+                args: [200000, '0x']
+            });
         }
-        // ABI for depositETH
-        const depositEthAbi = (0, viem_1.parseAbi)([
-            'function depositETH(uint32 _minGasLimit, bytes _extraData) payable'
-        ]);
-        // OP Stack requires a minGasLimit. 200000 is a safe default for simple ETH transfers.
-        const minGasLimit = 200000;
-        const extraData = '0x';
-        const callData = (0, viem_1.encodeFunctionData)({
-            abi: depositEthAbi,
-            functionName: 'depositETH',
-            args: [minGasLimit, extraData]
-        });
-        const destChainId = request.toChain === 'optimism_sepolia' ? 11155420 : 84532;
+        const getChainId = (name) => name === 'sepolia' ? 11155111 : (name === 'optimism_sepolia' ? 11155420 : 84532);
+        const note = isL1ToL2 ? 'OP Stack Standard Bridge L1->L2' : 'OP Stack Standard Bridge L2->L1 (Requires 7-day challenge period to finalize)';
         return {
             provider: this.manifest.name,
             routeId: `op-bridge-${crypto_1.default.randomUUID()}`,
-            fromChainId: 11155111,
-            toChainId: destChainId,
+            fromChainId: getChainId(request.fromChain),
+            toChainId: getChainId(request.toChain),
             inputAmount: BigInt(request.amountInWei),
             outputAmount: BigInt(request.amountInWei), // 1:1 bridging
             executable: true,
@@ -70,7 +84,7 @@ class OpBridgeProvider {
                 calldata: callData,
                 value: BigInt(request.amountInWei)
             },
-            raw: { note: 'OP Stack Standard Bridge L1->L2' }
+            raw: { note }
         };
     }
     async isHealthy() {

package/dist/packages/core/src/web3/aggregator/providers/TestnetSwapProvider.js

@@ -0,0 +1,65 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TestnetSwapProvider = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+class TestnetSwapProvider {
+    manifest = {
+        id: 'testnet_mock_swap',
+        name: 'Testnet Simulated Swap',
+        version: '1.0.1',
+        networks: ['testnet'],
+        capabilities: ['swap'],
+        allowedDomains: [],
+        permissions: {
+            network: false,
+            walletAccess: 'none',
+            filesystem: 'none'
+        }
+    };
+    isCrossChainSupported() {
+        return false;
+    }
+    supports(request) {
+        if (request.fromChain !== request.toChain)
+            return false;
+        // Only support testnet chains
+        return request.fromChain.includes('sepolia');
+    }
+    async getQuote(request, context) {
+        const chainIds = {
+            sepolia: 11155111,
+            base_sepolia: 84532,
+            optimism_sepolia: 11155420,
+            arbitrum_sepolia: 421614
+        };
+        // Simulate 1:0.98 exchange rate for testing (or a fixed amount if amounts aren't known)
+        // To make it look realistic, we just output 98% of the input conceptually (not accurate for different decimals, but works for mock UX).
+        const outAmount = (BigInt(request.amountInWei) * 98n) / 100n;
+        return {
+            provider: this.manifest.name,
+            routeId: `testnet-swap-${crypto_1.default.randomUUID()}`,
+            fromChainId: chainIds[request.fromChain] || 11155111,
+            toChainId: chainIds[request.toChain] || 11155111,
+            inputAmount: BigInt(request.amountInWei),
+            outputAmount: outAmount,
+            estimatedGasUsd: 0.05,
+            executable: true,
+            expiresAt: Date.now() + 86400000,
+            execution: {
+                // Send a 0 value transaction to the user's own address to simulate contract interaction
+                // without actually losing testnet funds or failing.
+                target: request.userAddress,
+                calldata: '0x',
+                value: 0n
+            },
+            raw: { note: 'Simulated Testnet Swap. Generating a dummy zero-value transaction for UI verification.' }
+        };
+    }
+    async isHealthy() {
+        return { ok: true, checkedAt: Date.now() };
+    }
+}
+exports.TestnetSwapProvider = TestnetSwapProvider;

package/dist/packages/core/src/web3/aggregator/routeSelector.js

@@ -36,7 +36,13 @@ async function fetchBestRoute(request, preference = "best_output") {
     // 1. Resolve eligible providers
     let eligibleProviders = providerRegistry_1.aggregatorRegistry.resolveEligibleProviders(request);
     if (request.preferredProvider && request.preferredProvider !== "auto") {
-        eligibleProviders = eligibleProviders.filter(p => p.manifest.id === request.preferredProvider);
+        const filteredProviders = eligibleProviders.filter(p => p.manifest.id === request.preferredProvider);
+        if (filteredProviders.length > 0) {
+            eligibleProviders = filteredProviders;
+        }
+        else {
+            console.warn(`[RouteSelector] LLM Hallucinated or requested an ineligible provider: '${request.preferredProvider}'. Falling back to automatic provider routing.`);
+        }
     }
     if (eligibleProviders.length === 0) {
         throw new Error('[RouteSelector] No eligible providers found for this route.');

package/dist/packages/core/src/web3/plugins/Web3DefiPlugin.js

@@ -16,7 +16,7 @@ const confirmPendingTx_1 = require("../skills/confirmPendingTx");
 class Web3DefiPlugin {
     name = 'Web3DefiPlugin';
     description = 'Core DeFi operations including balance checking, portfolio analysis, and token swapping.';
-    version = '1.0.0';
+    version = '1.0.1';
     tools = [
         getBalance_1.getBalanceToolDefinition,
         checkPortfolio_1.checkPortfolioToolDefinition,

package/dist/packages/core/src/web3/plugins/Web3MarketPlugin.js

@@ -2,7 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Web3MarketPlugin = void 0;
 const httpClient_1 = require("../../utils/httpClient");
-const riskIntelligence_1 = require("../utils/riskIntelligence");
 const marketConfigManager_1 = require("../../config/marketConfigManager");
 async function fetchCexData(symbol) {
     try {
@@ -96,139 +95,20 @@ async function fetchCexMomentum(symbol, currentP) {
         }
     }
 }
+const marketAnalysis_1 = require("../skills/marketAnalysis");
 class Web3MarketPlugin {
     name = 'MarketAnalysis';
-    version = '1.0.0';
+    version = '1.0.1';
     description = 'Provides deep market intelligence and analysis for Web3 assets.';
     tools = [
-        {
-            type: 'function',
-            function: {
-                name: 'analyze_market',
-                description: 'Analyzes the market health of a token (Price, FDV, TVL, Holders, Momentum) by fetching from CEX, DEX, CoinGecko, and DefiLlama. Returns a full intelligence report.',
-                parameters: {
-                    type: 'object',
-                    properties: {
-                        tokenAddressOrSymbol: { type: 'string', description: 'The token symbol (e.g. BTC, ETH) or Contract Address.' },
-                        chainName: { type: 'string', description: 'Optional chain name (e.g. ethereum, solana) if searching by address.' }
-                    },
-                    required: ['tokenAddressOrSymbol']
-                }
-            }
-        }
+        marketAnalysis_1.marketAnalysisToolDefinition
     ];
     handlers = {
         'analyze_market': async (args, context) => {
             try {
                 const { chainName, tokenAddressOrSymbol } = args;
-                if (!tokenAddressOrSymbol)
-                    throw new Error("Token symbol is invalid.");
-                const cleanInput = String(tokenAddressOrSymbol || "").replace('$', '').toLowerCase();
-                const isAddress = cleanInput.startsWith('0x') && cleanInput.length === 42;
-                let officialSymbol = cleanInput.toUpperCase();
-                let contractAddress = isAddress ? cleanInput : null;
-                let network = chainName || "UNKNOWN";
-                let currentPrice = 0;
-                let mcapUsd = 0;
-                let liquidityUsd = 0;
-                let volume24h = 0;
-                let priceChange24h = 0;
-                let rsi = null;
-                let ma50 = null;
-                let isCexAsset = false;
-                // PHASE 1
-                if (isAddress) {
-                    const targetPair = await fetchDexData(cleanInput, true, chainName);
-                    if (targetPair) {
-                        officialSymbol = targetPair.baseToken.symbol;
-                        contractAddress = targetPair.baseToken.address;
-                        network = targetPair.chainId.toUpperCase();
-                        currentPrice = parseFloat(targetPair.priceUsd || "0");
-                        mcapUsd = targetPair.fdv || 0;
-                        liquidityUsd = targetPair.liquidity?.usd || 0;
-                        volume24h = targetPair.volume?.h24 || 0;
-                        priceChange24h = targetPair.priceChange?.h24 || 0;
-                    }
-                    else {
-                        return `[Market Intelligence] Failed to find data for Contract Address ${tokenAddressOrSymbol} on DEX.`;
-                    }
-                    const momentum = await fetchCexMomentum(officialSymbol, currentPrice);
-                    ma50 = momentum.ma50;
-                    rsi = momentum.rsi;
-                }
-                else {
-                    const cgData = await fetchCoinGeckoData(officialSymbol);
-                    const cex = await fetchCexData(officialSymbol);
-                    if (cgData || cex) {
-                        isCexAsset = true;
-                        network = `Global CEX/Market`;
-                        currentPrice = cex ? cex.price : (cgData?.price || 0);
-                        volume24h = cgData ? cgData.vol : (cex?.vol || 0);
-                        priceChange24h = cex ? cex.change : (cgData?.change || 0);
-                        mcapUsd = cgData ? cgData.fdv : (volume24h * 10);
-                        liquidityUsd = cgData ? cgData.fdv * 0.1 : (volume24h * 2);
-                        const momentum = await fetchCexMomentum(officialSymbol, currentPrice);
-                        ma50 = momentum.ma50;
-                        rsi = momentum.rsi;
-                    }
-                    else {
-                        const targetPair = await fetchDexData(cleanInput, false, chainName);
-                        if (targetPair) {
-                            officialSymbol = targetPair.baseToken.symbol;
-                            contractAddress = targetPair.baseToken.address;
-                            network = targetPair.chainId.toUpperCase();
-                            currentPrice = parseFloat(targetPair.priceUsd || "0");
-                            mcapUsd = targetPair.fdv || 0;
-                            liquidityUsd = targetPair.liquidity?.usd || 0;
-                            volume24h = targetPair.volume?.h24 || 0;
-                            priceChange24h = targetPair.priceChange?.h24 || 0;
-                        }
-                        else {
-                            return `[Market Intelligence] Failed to find market data for symbol ${officialSymbol} on both CEX and DEX.`;
-                        }
-                    }
-                }
-                // PHASE 2
-                let tvlChange7d = null;
-                try {
-                    const llamaData = await (0, httpClient_1.safeFetchJson)(`https://api.llama.fi/protocol/${officialSymbol.toLowerCase()}`);
-                    if (llamaData && llamaData.tvl) {
-                        const tvlList = llamaData.tvl;
-                        if (tvlList.length > 7) {
-                            const todayTvl = tvlList[tvlList.length - 1].totalLiquidityUSD;
-                            const weekAgoTvl = tvlList[tvlList.length - 8].totalLiquidityUSD;
-                            if (weekAgoTvl > 0)
-                                tvlChange7d = ((todayTvl - weekAgoTvl) / weekAgoTvl) * 100;
-                        }
-                    }
-                }
-                catch { }
-                // PHASE 3
-                let top10HoldersPercent = null;
-                if (contractAddress || isCexAsset) {
-                    if (mcapUsd > 100000000)
-                        top10HoldersPercent = 15;
-                    else if (mcapUsd < 500000)
-                        top10HoldersPercent = 85;
-                    else
-                        top10HoldersPercent = 45;
-                }
-                // PHASE 4
-                const healthResult = (0, riskIntelligence_1.generateMarketHealthReport)(liquidityUsd, mcapUsd, tvlChange7d, volume24h, priceChange24h, top10HoldersPercent, rsi, currentPrice, ma50);
-                // PHASE 5
-                let report = `📊 **Market Intelligence Report: ${officialSymbol}**\n`;
-                report += `CA: \`${contractAddress || 'N/A'}\` | Network: ${network}\n\n`;
-                report += `**⭐ Overall Market Health Score:** ${healthResult.overallScore} / 10\n\n`;
-                report += `**1. Liquidity Risk:** ${healthResult.liquidityScore !== null ? healthResult.liquidityScore + '/10' : '[ N/A ]'}\n`;
-                report += `- Liquidity: $${liquidityUsd.toLocaleString()} vs FDV: $${mcapUsd.toLocaleString()}\n`;
-                report += `**2. Smart Money Flow:** ${healthResult.smartMoneyScore !== null ? healthResult.smartMoneyScore + '/10' : '[ N/A - Not in DefiLlama ]'}\n`;
-                report += `- 24h Volume: $${volume24h.toLocaleString()} | TVL 7D Change: ${tvlChange7d !== null ? tvlChange7d.toFixed(2) + '%' : 'N/A'}\n`;
-                report += `**3. Holder Concentration:** ${healthResult.concentrationScore !== null ? healthResult.concentrationScore + '/10' : '[ N/A - RPC Pending ]'}\n`;
-                report += `- Top 10 Holders: ${top10HoldersPercent !== null ? top10HoldersPercent + '%' : 'N/A'}\n`;
-                report += `**4. Momentum (CEX):** ${healthResult.momentumScore !== null ? healthResult.momentumScore + '/10' : '[ N/A - DEX Only Coin ]'}\n`;
-                report += `- Price: $${currentPrice} | MA50: ${ma50 ? '$' + ma50.toFixed(4) : 'N/A'} | RSI: ${rsi || 'N/A'}\n\n`;
-                report += `*System Note for LLM: Use this exact data to provide a "Market Summary" and "Suggested Autonomous Actions" in the user's native language. If CEX momentum is N/A, explicitly warn about high risk Degen/Memecoin status. IMPORTANT: Always include a clear disclaimer at the end (translated into the user's native language) stating that this analysis is NOT financial advice (NFA).*`;
-                return report;
+                const { analyzeMarket } = require('../skills/marketAnalysis');
+                return await analyzeMarket(chainName, tokenAddressOrSymbol);
             }
             catch (error) {
                 return `[Market Intelligence] Failed to aggregate data: ${error.message}`;

package/dist/packages/core/src/web3/plugins/Web3SecurityPlugin.js

@@ -8,7 +8,7 @@ const checkRegistryStatus_1 = require("../skills/checkRegistryStatus");
 class Web3SecurityPlugin {
     name = 'Web3SecurityPlugin';
     description = 'Security, analysis, and safety registry operations.';
-    version = '1.0.0';
+    version = '1.0.1';
     tools = [
         checkSecurity_1.checkSecurityToolDefinition,
         getTrendingTokens_1.getTrendingTokensToolDefinition,

package/dist/packages/core/src/web3/plugins/Web3WalletPlugin.js

@@ -11,7 +11,7 @@ const transfer_1 = require("../skills/transfer");
 class Web3WalletPlugin {
     name = 'Web3WalletPlugin';
     description = 'Core wallet and transaction operations including transfer, custom tx, and history.';
-    version = '1.0.0';
+    version = '1.0.1';
     tools = [
         transfer_1.transferToolDefinition,
         mintNft_1.mintNftToolDefinition,

package/dist/packages/core/src/web3/skills/bridgeToken.js

@@ -42,10 +42,12 @@ const vaultClient_1 = require("../utils/vaultClient");
 const transactionManager_1 = require("../../agent/transactionManager");
 const tokens_1 = require("../utils/tokens");
 const defiRouter_1 = require("../aggregator/defiRouter");
+const logger_1 = require("../../memory/logger");
+const parser_1 = require("../../config/parser");
 async function prepareBridgeToken(fromChain, toChain, tokenSymbol, amountStr, mode = "auto", providerName = "auto", slippagePercent) {
     try {
-        fromChain = String(fromChain || "");
-        toChain = String(toChain || "");
+        fromChain = (0, config_1.normalizeChainName)(fromChain);
+        toChain = (0, config_1.normalizeChainName)(toChain);
         if (!fromChain || !toChain)
             throw new Error("Source or destination chain not provided by AI.");
         if (!amountStr)
@@ -86,7 +88,20 @@ async function prepareBridgeToken(fromChain, toChain, tokenSymbol, amountStr, mo
             decimals = meta.decimals;
         }
         const amountWei = (0, viem_1.parseUnits)(amountStr, decimals).toString();
-        const slippage = slippagePercent || "auto";
+        // Front-to-Back Slippage Architecture
+        const userProfile = logger_1.logger.getUserProfile();
+        const maxSlippage = userProfile?.max_slippage || 1.0;
+        const config = (0, parser_1.loadConfig)();
+        const cfgSlippage = config.agent?.default_slippage;
+        let finalSlippage = slippagePercent;
+        if (finalSlippage === undefined || finalSlippage === null || finalSlippage === "auto") {
+            finalSlippage = (cfgSlippage === "auto" || !cfgSlippage) ? 0.5 : parseFloat(cfgSlippage);
+        }
+        if (typeof finalSlippage !== 'number' || isNaN(finalSlippage))
+            finalSlippage = 0.5;
+        if (finalSlippage > maxSlippage)
+            finalSlippage = maxSlippage;
+        const slippage = finalSlippage;
         // --- Pre-flight Balance Check ---
         const { validateTransactionBalances } = await Promise.resolve().then(() => __importStar(require('../utils/balanceChecker')));
         const balanceCheck = await validateTransactionBalances(fromChain, userAddress, fromTokenAddress, amountWei);
@@ -130,7 +145,7 @@ exports.bridgeTokenToolDefinition = {
                 tokenSymbol: { type: "string" },
                 amountStr: { type: "string" },
                 mode: { type: "string", enum: ["auto", "manual"], default: "auto" },
-                providerName: { type: "string", enum: ["auto", "lifi", "relay"], default: "auto" },
+                providerName: { type: "string", enum: ["auto", "lifi", "relay", "op_bridge_testnet", "arbitrum_bridge_testnet"], default: "auto", description: "The preferred provider. Use 'op_bridge_testnet' (for OP/Base Sepolia), 'arbitrum_bridge_testnet' (for Arb Sepolia), or 'relay' (testnet fallback)." },
                 slippagePercent: { type: "number" }
             },
             required: ["fromChain", "toChain", "tokenSymbol", "amountStr"],

package/dist/packages/core/src/web3/skills/checkAddress.js

@@ -2,10 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkAddressToolDefinition = void 0;
 exports.checkAddress = checkAddress;
+const chains_1 = require("../utils/chains");
 const viem_1 = require("viem");
 const config_1 = require("../config");
 async function checkAddress(chainName, address) {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         if (!(0, viem_1.isAddress)(address)) {
             return `Address validation failed: '${address}' is not a valid Web3 address format.`;
         }

package/dist/packages/core/src/web3/skills/checkPortfolio.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkPortfolioToolDefinition = void 0;
 exports.checkPortfolio = checkPortfolio;
+const chains_1 = require("../utils/chains");
 const viem_1 = require("viem");
 const config_1 = require("../config");
 const tokens_1 = require("../utils/tokens");
@@ -43,6 +44,7 @@ const portfolioCache = {};
 const CACHE_TTL = 5000; // 5 seconds TTL
 async function checkPortfolio(chainName, address) {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         const client = (0, config_1.getPublicClient)(chainName);
         let targetAddress = address;
         if (!targetAddress) {
@@ -155,9 +157,27 @@ async function checkPortfolio(chainName, address) {
             try {
                 const data = await (0, httpClient_1.safeFetchJson)(url);
                 if (data.pairs) {
+                    data.pairs.sort((a, b) => (b.liquidity?.usd || 0) - (a.liquidity?.usd || 0));
+                    const chainMatched = new Set();
                     data.pairs.forEach((p) => {
-                        if (!priceMap[String(p.baseToken.address).toLowerCase()]) {
-                            priceMap[String(p.baseToken.address).toLowerCase()] = parseFloat(p.priceUsd);
+                        const baseAddr = String(p.baseToken?.address || "").toLowerCase();
+                        const quoteAddr = String(p.quoteToken?.address || "").toLowerCase();
+                        const priceUsd = parseFloat(p.priceUsd || "0");
+                        const priceNative = parseFloat(p.priceNative || "0");
+                        if (baseAddr && priceUsd > 0) {
+                            if (!priceMap[baseAddr] || (!chainMatched.has(baseAddr) && p.chainId === chainName)) {
+                                priceMap[baseAddr] = priceUsd;
+                                if (p.chainId === chainName)
+                                    chainMatched.add(baseAddr);
+                            }
+                        }
+                        if (quoteAddr && priceUsd > 0 && priceNative > 0) {
+                            const quotePriceUsd = priceUsd / priceNative;
+                            if (!priceMap[quoteAddr] || (!chainMatched.has(quoteAddr) && p.chainId === chainName)) {
+                                priceMap[quoteAddr] = quotePriceUsd;
+                                if (p.chainId === chainName)
+                                    chainMatched.add(quoteAddr);
+                            }
                         }
                     });
                 }

package/dist/packages/core/src/web3/skills/checkSecurity.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkSecurityToolDefinition = void 0;
 exports.checkTokenSecurity = checkTokenSecurity;
+const chains_1 = require("../utils/chains");
 const config_1 = require("../config");
 const httpClient_1 = require("../../utils/httpClient");
 const CHAIN_IDS = {
@@ -18,6 +19,7 @@ const CHAIN_IDS = {
 };
 async function checkTokenSecurity(chainName, contractAddress) {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         const chainId = CHAIN_IDS[chainName];
         if (chainName === 'sepolia') {
             return `Security check API (GoPlus) does not support Sepolia testnet. Try a mainnet token.`;

package/dist/packages/core/src/web3/skills/confirmPendingTx.js

@@ -118,7 +118,7 @@ exports.confirmPendingTxToolDefinition = {
     type: "function",
     function: {
         name: "confirm_pending_tx",
-        description: "Approve or reject a pending transaction. Use this tool when a transaction has been queued and the user replies with a confirmation (like 'Yes' or 'Ya') or a rejection (like 'No' or 'Tidak').",
+        description: "Approve or reject a pending transaction. Use this tool when a transaction has been queued and the user replies with a confirmation (like 'Yes' or 'Ya') or a rejection (like 'No' or 'Tidak'). CRITICAL RULE: DO NOT call any other tool (like write_local_file) simultaneously with this one. Output ONLY this tool.",
         parameters: {
             type: "object",
             properties: {

package/dist/packages/core/src/web3/skills/createLimitOrder.js

@@ -4,8 +4,22 @@ exports.createLimitOrderToolDefinition = void 0;
 exports.createLimitOrder = createLimitOrder;
 const logger_1 = require("../../memory/logger");
 const transactionManager_1 = require("../../agent/transactionManager");
+const parser_1 = require("../../config/parser");
 async function createLimitOrder(tokenSymbol, tokenAddress, triggerCondition, triggerPriceUsd, action, amountUsd, slippageTolerance) {
     try {
+        // Front-to-Back Slippage Architecture
+        const userProfile = logger_1.logger.getUserProfile();
+        const maxSlippage = userProfile?.max_slippage || 1.0;
+        const config = (0, parser_1.loadConfig)();
+        const cfgSlippage = config.agent?.default_slippage;
+        let finalSlippage = slippageTolerance;
+        if (finalSlippage === undefined || finalSlippage === null) {
+            finalSlippage = (cfgSlippage === "auto" || !cfgSlippage) ? 0.5 : parseFloat(cfgSlippage);
+        }
+        if (typeof finalSlippage !== 'number' || isNaN(finalSlippage))
+            finalSlippage = 0.5;
+        if (finalSlippage > maxSlippage)
+            finalSlippage = maxSlippage;
         const orderData = {
             token_symbol: tokenSymbol,
             token_address: tokenAddress,
@@ -13,7 +27,7 @@ async function createLimitOrder(tokenSymbol, tokenAddress, triggerCondition, tri
             trigger_price_usd: triggerPriceUsd,
             action,
             amount_usd: amountUsd,
-            slippage_tolerance: slippageTolerance || 5.0
+            slippage_tolerance: finalSlippage
         };
         const orderId = logger_1.logger.createLimitOrder(orderData);
         const tx = transactionManager_1.txManager.createPendingTransaction('limit_order', 'any', {

package/dist/packages/core/src/web3/skills/customTx.js

@@ -36,11 +36,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.customTxToolDefinition = void 0;
 exports.prepareCustomTx = prepareCustomTx;
 exports.executeCustomTx = executeCustomTx;
+const chains_1 = require("../utils/chains");
 const config_1 = require("../config");
 const transactionManager_1 = require("../../agent/transactionManager");
 const vaultClient_1 = require("../utils/vaultClient");
 async function prepareCustomTx(chainName, toAddress, data, valueWei = "0", description = "Custom transaction") {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         if (!chainName || !toAddress || !data)
             throw new Error("Missing required parameters for custom transaction.");
         const { getAddress } = await Promise.resolve().then(() => __importStar(require('../utils/vaultClient')));
@@ -84,6 +86,7 @@ exports.customTxToolDefinition = {
     },
 };
 async function executeCustomTx(chainName, details, autoApprove = false) {
+    chainName = (0, chains_1.normalizeChainName)(chainName);
     // Fix HMAC mismatch by guaranteeing amountWei exists to match valueWei 
     const processedDetails = {
         ...details,

package/dist/packages/core/src/web3/skills/defiLending.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.aaveSupplyToolDefinition = void 0;
 exports.prepareAaveSupply = prepareAaveSupply;
+const chains_1 = require("../utils/chains");
 const viem_1 = require("viem");
 const config_1 = require("../config");
 const transactionManager_1 = require("../../agent/transactionManager");
@@ -65,6 +66,7 @@ const AAVE_V3_POOLS = {
 };
 async function prepareAaveSupply(chainName, tokenAddressOrSymbol, amountStr) {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         if (!chainName || !tokenAddressOrSymbol || !amountStr)
             throw new Error("Missing protocol/chain/token parameters for DeFi operation.");
         const publicClient = (0, config_1.getPublicClient)(chainName);

package/dist/packages/core/src/web3/skills/getBalance.js

@@ -35,12 +35,14 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getBalanceToolDefinition = void 0;
 exports.getBalance = getBalance;
+const chains_1 = require("../utils/chains");
 const viem_1 = require("viem");
 const config_1 = require("../config");
 const tokens_1 = require("../utils/tokens");
 const userWhitelistManager_1 = require("../../utils/userWhitelistManager");
 async function getBalance(chainName, address, token) {
     try {
+        chainName = (0, chains_1.normalizeChainName)(chainName);
         const client = (0, config_1.getPublicClient)(chainName);
         let targetAddress = address;
         if (!targetAddress) {