FOLLOW-UP 6: Multi-pair scanner + Manual mode + Hardening

1. ALL-PAIRS MODE (new): Add a 3rd monitoring mode alongside existing "Pair" mode and new "Manual" mode.

UI: Token A (single input) + Token B list (textarea, one address per line, default:

0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73

0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168)

• Window + Protocol (V3/V4/Both) + WATCH button.

Discovery (once per list change):

• Per Token B: sort (A,B) by BigInt → V3: factory.getPool(token0,token1,fee) for [100,500,3000,10000]. V4: compute poolId, call getLiquidity(poolId). Store non-zero results.

Per-poll:

• V3: eth_getLogs address=[all V3 pools], topics=[0xc42079f94a6350d7e6235f29174924f928cc2ac818eb64fed8004e115fbcca67], window. ONE call.
• V4: eth_getLogs address=[PoolManager], topics=[0x40e9cecb9f5f1f1c5b9c97dec2917b7ee92e57ba5563708daca94dd84ad7112f], window. ONE call. Filter to our poolIds.
• Decode tick → price = 1.0001^tick. Staleness same as existing.
• V3 active pools: pool.liquidity() via eth_call.

Display:

• Pool table: | Token B | Fee | Price | Swaps | Active? | Last Swap | Protocol |
• Spread table: ALL pairwise combos across all active pools. Column "Path" shows e.g. "V3 0.05% (WETH) → V3 0.30% (USDG)".
• Cross-pair (different Token B): tag "3-LEG", watch-only, no execute button.
• Same-pair spreads: fully executable (click → quote → dry run → send), unchanged.

2. MANUAL MODE (re-add, was uncommitted):

• Pool A + Pool B address inputs. READ PRICES button (one-shot, no polling).
• Calls slot0(), fee(), token0(), token1(), liquidity() on both.
• Shows single spread row. If GREEN: executable via existing V3 code. If liquidity==0: "EMPTY", disabled.

3. HARDENING: a) 30000/600 filter: V4 pool with tick ≤ -887000 → mark "EMPTY", exclude from spreads.

b) Gas estimate: after quote, show "Gas: ~$X (250K gas V3 / 400K V4 × eth_gasPrice)". Show "Net after gas: $Y".

c) Multi-tab lock: localStorage "ponsarb_lock" = timestamp on send. If <5min old on load: banner "Another tab active", disable execute. Clear on beforeunload.

d) REVOKE ALL button (Section 2, when connected): approve(SwapRouter02,0) + approve(Permit2,0) for input token. Sequential, confirm each.

4. WORKER FALLBACK: If primary (Blockmachine) returns 429/500 → retry once against https://robinhood.drpc.org. Return whichever succeeds.

5. KEEP UNCHANGED: All V3+V4 execution code, monitor architecture, UI layout, wallet transfer, activity log, existing tests.

6. ADDRESSES: V3 Factory: 0x1f7d7550b1b028f7571e69a784071f0205fd2efa

V3 SwapRouter02: 0xcaf681a66d020601342297493863e78c959e5cb2

V4 PoolManager: 0x8366a39CC670B4001A1121B8F6A443A643e40951

V4 Universal Router: 0x8876789976dEcBfCbBbe364623C63652db8C0904

Permit2: 0x000000000022D473030F116dDEE9F6B43aC78BA3

WETH: 0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73 (18 dec)

USDG: 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 (6 dec)

PONS: 0x39dbed3a2bd333467115de45665cc57f813c4571 (18 dec)

RPC: https://rpc-robinhood.blockmachine.io

Chain ID: 4663

7. TESTS: All existing pass. New: All Pairs shows pools from multiple Token B's. Manual mode works. 30000/600 at tick -887272 = EMPTY. Multi-tab lock works. Revoke zeroes allowances. Worker falls back to dRPC.

DELIVERABLE: Updated index.html + js/v4-arb-encoder.js + Worker code. Commit all (Manual mode included).