AlgoVoi v0.5.0 — AI Agent Chat + Coinbase Onramp
What's new in v0.5.0
AI Agent Chat (Voi chain · Agents tab)
Natural-language wallet assistant powered by Claude Sonnet 4 via the UluMCP server.
- Direct actions — structured commands bypass AI entirely (zero token cost):
swap 10 VOI for USDC·send 5 VOI to alice.voi·balance·price of VIAresolve nugget.voi·register mynewname.voi
- AI fallback — conversational and ambiguous queries use Claude Sonnet 4 with a per-category tool whitelist
- Categories: tokens · NFTs · swaps · names · lending · general
- Anthropic API key lives exclusively on the UluMCP server — never bundled in the extension
- Single Sign & Send — swap groups (approve + swap + withdraw) merged into one button, one click
Coinbase Onramp (Algorand chain · Assets tab)
Buy ALGO directly from the wallet via the Buy button.
- Secure session-token flow: wallet address POSTed to AlgoVoi backend, never in URL parameters
- Satisfies Coinbase "require secure initialization" — one-time session token from backend
- CORS restricted to
chrome-extension://origin - Feature-flagged via
COINBASE_ONRAMP_ENABLED— pending Coinbase UK country approval
Auto-update notifications
Extension checks for new releases via the MCP server and shows an amber banner with a download link when a newer version is available. No new permissions required.
- Checks on startup + daily via Chrome alarm
- Server-side
/versionendpoint auto-syncs from GitHub releases every 30 minutes - Amber "UPD" badge on extension icon when update available
UX improvements
- Account removal confirmation modal — replaces native
window.confirmwith in-app styled modal showing account name, address, and backup warning (#1) - Single sign button for swap groups — multi-transaction swaps now show one "Sign & Send (N txns)" button instead of separate buttons per transaction
Bug fixes
- Import mnemonic on empty-wallet view — the Import Mnemonic button on the empty-wallet screen was non-functional (modal not rendered in early return path). Users were forced through full wallet setup which silently wiped existing accounts on other chains.
- Three approval popups per swap — direct-action tool calls (snowball_tokens, humble_pools, humble_swap_txn) were each hitting x402 payment gates, opening a separate approval popup per call. Server now exempts extension tool calls from x402.
MCP tools expanded
50 tools across 11 modules: arc200 · arc72 · envoi · humble · snowball · swap200 · marketplace · txns · dorkfi · x402 · algod · chat
Security
Hardening XVII–XXI — full review of all attack surfaces. 0 Critical · 0 High · 0 Medium · 0 Low open.
See SECURITY_AUDIT.md for full audit history (Hardening I–XXI).
Installation
- Download
algovoi-v0.5.0.zipand unzip - Open Chrome →
chrome://extensions→ enable Developer mode - Click Load unpacked → select the unzipped folder