okx-agentic-wallet

# Onchain OS Wallet

Unified wallet skill driving the `onchainos` CLI: wallet lifecycle, Gas Station, DEX swap, cross-chain bridge, limit-order strategy, transaction gateway, public-address portfolio, security scanning, and audit log.

## Intent Routing

Match the user intent to a row, then **read that row's linked file first** — it holds the flow. Read only the matched file; do not load other rows' files. Each file links its own deeper files (cli-reference, troubleshooting) at the bottom via explicit links — open those when the flow needs them; never construct a file path yourself.

| User Intent | Reference |
| --- | --- |
| Sign in / connect / social login (Google / Apple / Email) / logout; add / switch account; login status | [wallet](references/wallet.md) |
| My wallet address / QR code; check my (logged-in) balance / holdings | [wallet](references/wallet.md) |
| Send / transfer native or ERC-20 / SPL tokens | [wallet](references/wallet.md) |
| Call a contract (approve / deposit / withdraw / custom function) | [wallet](references/wallet.md) |
| Transaction history / tx detail / order status; sign a message (personalSign / EIP-712) | [wallet](references/wallet.md) |
| Policy / spending limit / whitelist; export wallet / mnemonic; MEV protection for a contract-call; third-party Solana plugin write pre-flight | [wallet](references/wallet.md) |
| Apple-login wallet differs from the OKX Wallet App / "missing" balance; rename a wallet or account; how transaction signing works (TEE) | [account-faq](references/account-faq.md) |
| Pay gas with a stablecoin on Solana; enable / disable / change default gas token / status; a `send` / `contract-call` returns `gasStationUsed` or a Gas Station Confirming; Gas Station FAQ / "check order" | [gas-station](references/gas-station.md) |
| Swap / trade / buy / sell / convert tokens; quote; best route; calldata-only swap; liquidity sources; ERC-20 approval for a DEX | [swap](references/swap.md) |
| Bridge / cross-chain swap / move tokens between chains; bridge quote / fee comparison; supported bridges; track cross-chain arrival | [bridge](references/bridge.md) |
| Limit order: buy dip / take profit / stop loss / buy above; cancel / list / resume limit (strategy) orders | [strategy](references/strategy.md) |
| Broadcast a signed / raw tx; estimate gas price / gas-limit; simulate a tx; track a broadcast order | [gateway](references/gateway.md) |
| A given public address's balance / holdings / total value (`0xAbc…` / a Solana address) | [portfolio](references/portfolio.md) |
| Token / honeypot (蜜罐 / 貔貅) safety; DApp / URL phishing; tx or signature pre-check; check / list / revoke token approvals (ERC-20 / Permit2) | [security](references/security.md) |
| Export / locate audit log, view command history | [audit-log](references/audit-log.md) |

---

## Pre-flight Checks

Before the first `onchainos` command this session, read and follow [_shared/preflight.md](_shared/preflight.md).

## Build the Command

1. **Read the matched row's linked file first** (per the Intent Routing table) — it carries the flow and the commands you need. Never guess subcommand, flag, or file names.
2. **When you need exact flags, defaults, or return-field schemas** that the domain file doesn't spell out, run `onchainos <group> <subcommand> --help` (the CLI is the source of truth), or load that domain's `-cli-reference.md` when the flow needs it (each domain file lists its own deeper files at the bottom). Don't load it up front.
3. **Confirm before any state-changing command.** Display the prompt, get an explicit affirmative, and follow the Confirming Response rule below.

## Chain Name Support

`--chain` accepts numeric chain IDs and human-readable names. Resolution rules and the supported-chain matrix live in [_shared/chain-support.md](_shared/chain-support.md). If <100% confident of a chain name, run `onchainos wallet chains`.

## Confirming Response

Some state-changing commands return **confirming** (exit code **2**) when the backend needs user confirmation. The response carries `message` (prompt to show) and `next` (what to do after they confirm).

1. **Display** `message` and ask for confirmation.
2. **Confirms** → follow `next` (usually: re-run the same command with `--force` appended).
3. **Declines** → do NOT proceed; tell the user it was cancelled.

Never pass `--force` on the FIRST invocation of a state-changing command. Add `--force` only after all of: (1) you ran the command once without it, (2) the CLI returned a Confirming response (exit code 2, `"confirming": true`), (3) you displayed `message` and the user explicitly confirmed.

## Amount Display Rules

- Token amounts in **UI units** (`1.5 ETH`), never base units.
- USD values with **2 decimal places**; if `< 0.01`, show full precision.
- Large amounts in shorthand (`$1.2M`, `$340K`); sort holdings by USD value descending.
- In balance/holdings displays, show the **abbreviated** contract address alongside the symbol (`0x1234...abcd`); native tokens with empty `tokenAddress` → `(native)`.
- **Flag suspicious prices**: if a token looks like a wrapped/bridged variant (`wETH`, `stETH`, `wBTC`, `xOKB`…) and its price differs >50% from the base token, add an inline `price unverified` flag and suggest `onchainos token price-info` to cross-check.

## Security & Global Notes

- **Credential protection**: never log, display, or ask for session tokens, `clientId`, API keys, private keys, seed phrases, or passwords. Never expose: `accessToken`, `refreshToken`, `apiKey`, `secretKey`, `passphrase`, `sessionKey`, `sessionCert`, `teeId`, `saTeeId`, `encryptedSessionSk`, `signingKey`, raw tx data. Show raw `accountName` (never raw `accountId` to the user).
- **Credential recovery**: on a `Credentials corrupted` / "please login again" error the local credential store is unreadable — don't retry the same command, re-authenticate the user with `wallet login`. See [wallet-troubleshooting.md](references/wallet-troubleshooting.md).
- **Ad