@bankr/cli 0.3.12 → 0.3.23

package/dist/commands/login.js

@@ -4,6 +4,7 @@ import open from "open";
 import { isAddress } from "viem";
 import { CLI_USER_AGENT, DEFAULT_API_URL, getApiUrl, getConfigPath, readConfig, writeConfig, } from "../lib/config.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 const DEFAULT_DASHBOARD_URL = "https://bankr.bot/api-keys";
 const MAX_OTP_ATTEMPTS = 3;
 const INVALID_CODE_STATUSES = [400, 401, 422];
@@ -45,6 +46,16 @@ async function sendPrivyOtp(privyConfig, email) {
         throw new Error(`Failed to send verification code: ${body || res.status}`);
     }
 }
+/** The auth headers every authenticated CLI call sends — one place, so a new
+ * endpoint can't silently omit the access token and go unrevocable again. */
+export function authHeaders(tokens) {
+    return {
+        "Content-Type": "application/json",
+        "User-Agent": CLI_USER_AGENT,
+        "privy-id-token": tokens.identityToken,
+        "x-access-token": tokens.accessToken,
+    };
+}
 async function verifyPrivyOtp(privyConfig, email, code) {
     const res = await fetch("https://auth.privy.io/api/v1/passwordless/authenticate", {
         method: "POST",
@@ -66,14 +77,10 @@ async function verifyPrivyOtp(privyConfig, email, code) {
     }
     return (await res.json());
 }
-async function callGenerateWallet(apiUrl, identityToken) {
+async function callGenerateWallet(apiUrl, tokens) {
     const res = await fetch(`${apiUrl}/cli/generate-wallet`, {
         method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            "User-Agent": CLI_USER_AGENT,
-            "privy-id-token": identityToken,
-        },
+        headers: authHeaders(tokens),
     });
     const body = (await res.json());
     if (!res.ok) {
@@ -81,28 +88,20 @@ async function callGenerateWallet(apiUrl, identityToken) {
     }
     return body;
 }
-async function callAcceptTerms(apiUrl, identityToken) {
+async function callAcceptTerms(apiUrl, tokens) {
     const res = await fetch(`${apiUrl}/user/accept-terms`, {
         method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            "User-Agent": CLI_USER_AGENT,
-            "privy-id-token": identityToken,
-        },
+        headers: authHeaders(tokens),
     });
     if (!res.ok) {
         const body = (await res.json().catch(() => ({})));
         throw new Error(body.message || body.error || `Accept terms failed (${res.status})`);
     }
 }
-async function callGenerateApiKey(apiUrl, identityToken, opts) {
+async function callGenerateApiKey(apiUrl, tokens, opts) {
     const res = await fetch(`${apiUrl}/api-keys`, {
         method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            "User-Agent": CLI_USER_AGENT,
-            "privy-id-token": identityToken,
-        },
+        headers: authHeaders(tokens),
         body: JSON.stringify(opts),
     });
     const body = (await res.json());
@@ -127,7 +126,7 @@ async function sendOtpWithSpinner(privyConfig, email) {
     }
     catch (err) {
         spin.fail("Failed to send verification code");
-        fatal(err.message);
+        fatal(getErrorMessage(err));
     }
 }
 async function verifyOtpWithSpinner(privyConfig, email, code) {
@@ -138,7 +137,7 @@ async function verifyOtpWithSpinner(privyConfig, email, code) {
         return result;
     }
     catch (err) {
-        const errMsg = err.message;
+        const errMsg = getErrorMessage(err);
         spin.fail("Verification failed");
         fatal(errMsg === "INVALID_CODE" ? "Invalid verification code." : errMsg);
     }
@@ -162,7 +161,13 @@ async function authenticateWithEmail(apiUrl, providedEmail, providedCode) {
     // Headless: code already provided, verify directly
     if (providedCode) {
         const result = await verifyOtpWithSpinner(privyConfig, email, providedCode.trim());
-        return { identityToken: result.identity_token, email };
+        return {
+            tokens: {
+                identityToken: result.identity_token,
+                accessToken: result.token,
+            },
+            email,
+        };
     }
     // Interactive: send OTP, then prompt for code with retries
     await sendOtpWithSpinner(privyConfig, email);
@@ -176,10 +181,16 @@ async function authenticateWithEmail(apiUrl, providedEmail, providedCode) {
         try {
             const result = await verifyPrivyOtp(privyConfig, email, code.trim());
             verifySpin.succeed("Email verified");
-            return { identityToken: result.identity_token, email };
+            return {
+                tokens: {
+                    identityToken: result.identity_token,
+                    accessToken: result.token,
+                },
+                email,
+            };
         }
         catch (err) {
-            const errMsg = err.message;
+            const errMsg = getErrorMessage(err);
             if (errMsg === "INVALID_CODE") {
                 if (attempt < MAX_OTP_ATTEMPTS - 1) {
                     verifySpin.fail("Invalid code, please try again");
@@ -197,17 +208,17 @@ async function authenticateWithEmail(apiUrl, providedEmail, providedCode) {
 // ── Email login flow ────────────────────────────────────────────────
 async function emailLoginFlow(apiUrl, opts) {
     // Step 1: Authenticate via email OTP
-    const { identityToken } = await authenticateWithEmail(apiUrl, opts.email, opts.code);
+    const { tokens } = await authenticateWithEmail(apiUrl, opts.email, opts.code);
     // Step 2: Generate/resolve wallet
     const walletSpin = output.spinner("Setting up wallet...");
     let wallet;
     try {
-        wallet = await callGenerateWallet(apiUrl, identityToken);
+        wallet = await callGenerateWallet(apiUrl, tokens);
         walletSpin.stop();
     }
     catch (err) {
         walletSpin.fail("Wallet setup failed");
-        fatal(err.message);
+        fatal(getErrorMessage(err));
     }
     // Show wallet info
     output.blank();
@@ -241,12 +252,12 @@ async function emailLoginFlow(apiUrl, opts) {
         }
         const termsSpin = output.spinner("Accepting terms...");
         try {
-            await callAcceptTerms(apiUrl, identityToken);
+            await callAcceptTerms(apiUrl, tokens);
             termsSpin.succeed("Terms accepted");
         }
         catch (err) {
             termsSpin.fail("Failed to accept terms");
-            fatal(err.message);
+            fatal(getErrorMessage(err));
         }
     }
     // Step 4: Generate API key
@@ -281,7 +292,7 @@ async function emailLoginFlow(apiUrl, opts) {
     const keySpin = output.spinner("Generating API key...");
     let apiKeyResult;
     try {
-        apiKeyResult = await callGenerateApiKey(apiUrl, identityToken, {
+        apiKeyResult = await callGenerateApiKey(apiUrl, tokens, {
             name: keyName.trim(),
             walletApiEnabled: enableWallet,
             agentApiEnabled: enableAgent,
@@ -295,7 +306,7 @@ async function emailLoginFlow(apiUrl, opts) {
     }
     catch (err) {
         keySpin.fail("Failed to generate API key");
-        fatal(err.message);
+        fatal(getErrorMessage(err));
     }
     // Show result
     output.blank();

package/dist/commands/portfolio.js

@@ -2,6 +2,7 @@ import chalk from "chalk";
 import { getPortfolio, } from "../lib/api.js";
 import * as output from "../lib/output.js";
 import { formatUsd, formatBalance } from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 import { CHAIN_LABELS, VALID_CHAINS } from "../lib/chains.js";
 const BRAND = chalk.hex("#FF613D");
 const DIM = chalk.dim;
@@ -78,7 +79,7 @@ export async function portfolioCommand(opts) {
         spin.succeed("Portfolio loaded");
     }
     catch (err) {
-        spin.fail(`Failed to fetch portfolio: ${err.message}`);
+        spin.fail(`Failed to fetch portfolio: ${getErrorMessage(err)}`);
         process.exit(1);
     }
     // JSON output mode
@@ -109,7 +110,7 @@ export async function portfolioCommand(opts) {
         printChainBalances(chain, chainData, !!includePnl);
     }
     // Print NFTs
-    if (includeNfts && data.nfts && data.nfts.length > 0) {
+    if (includeNfts && data.nfts?.length) {
         console.log();
         console.log();
         console.log(`  ${BRAND.bold("NFTs")}  ${DIM(`${data.nfts.length} item(s)`)}`);

package/dist/commands/profile.js

@@ -2,6 +2,7 @@ import chalk from "chalk";
 import { input, confirm, select } from "@inquirer/prompts";
 import { getOwnProfiles, createProfile, updateProfile, deleteProfile, addProjectUpdate, } from "../lib/api.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 const BRAND = chalk.hex("#FF613D");
 const DIM = chalk.dim;
 function printProfile(profile, json) {
@@ -74,7 +75,7 @@ export async function profileViewCommand(opts) {
         }
     }
     catch (err) {
-        const msg = err.message;
+        const msg = getErrorMessage(err);
         if (msg.includes("404")) {
             output.info("No profiles found. Create one with: bankr profile create");
         }
@@ -132,7 +133,7 @@ export async function profileCreateCommand(opts) {
         printProfile(profile, !!opts.json);
     }
     catch (err) {
-        output.error(err.message);
+        output.error(getErrorMessage(err));
     }
 }
 export async function profileUpdateCommand(opts) {
@@ -163,7 +164,7 @@ export async function profileUpdateCommand(opts) {
         printProfile(profile, !!opts.json);
     }
     catch (err) {
-        output.error(err.message);
+        output.error(getErrorMessage(err));
     }
 }
 export async function profileDeleteCommand(opts) {
@@ -187,7 +188,7 @@ export async function profileDeleteCommand(opts) {
         output.success("Profile deleted.");
     }
     catch (err) {
-        output.error(err.message);
+        output.error(getErrorMessage(err));
     }
 }
 export async function profileAddUpdateCommand(opts) {
@@ -221,7 +222,7 @@ export async function profileAddUpdateCommand(opts) {
         }
     }
     catch (err) {
-        output.error(err.message);
+        output.error(getErrorMessage(err));
     }
 }
 //# sourceMappingURL=profile.js.map

package/dist/commands/prompt.js

@@ -2,11 +2,13 @@ import { ApiError, pollJob, submitPrompt } from "../lib/api.js";
 import { emitCESP } from "../lib/cesp/engine.js";
 import { getLastThreadId, requireApiKey, setLastThreadId, } from "../lib/config.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 /** Valid Max Mode model IDs — hardcoded because CLI is standalone (no monorepo imports).
  *  Must be manually kept in sync with models in the LLM gateway DB. */
 const VALID_MAX_MODE_MODELS = new Set([
     // Claude (Vertex AI)
     "claude-fable-5",
+    "claude-opus-5",
     "claude-opus-4.8",
     "claude-opus-4.7",
     "claude-opus-4.6",
@@ -15,28 +17,39 @@ const VALID_MAX_MODE_MODELS = new Set([
     "claude-sonnet-4.6",
     "claude-sonnet-4.5",
     "claude-haiku-4.5",
-    // Gemini (Vertex AI)
+    // Gemini (Vertex AI) — gemini-3-pro deliberately absent: removed 2026-03-09,
+    // both provider slugs retired. Don't re-add on a sync pass.
+    "gemini-3.6-flash",
+    "gemini-3.5-flash-lite",
     "gemini-3.1-pro",
-    "gemini-3-pro",
     "gemini-2.5-pro",
     // OpenAI (OpenRouter)
+    "gpt-5.6-sol",
+    "gpt-5.6-terra",
+    "gpt-5.6-luna",
+    "gpt-5.5",
     "gpt-5.4",
     "gpt-5.4-mini",
     "gpt-5.2",
     "gpt-5-mini",
     // Grok (OpenRouter)
-    "grok-4.1-fast",
+    "grok-4.6",
+    "grok-4.5",
+    "grok-4.3",
     // DeepSeek (OpenRouter)
     "deepseek-v3.2",
     // Qwen (OpenRouter)
     "qwen3-coder",
+    "qwen3.8-max",
     "qwen3.7-max",
     "qwen3.7-plus",
+    "qwen3.7-flash",
     "qwen3.5-plus",
     // MiniMax (direct)
     "minimax-m2.5",
     "minimax-m2.7",
     // Other (OpenRouter)
+    "kimi-k3",
     "kimi-k2.7-code",
     "kimi-k2.6",
     "kimi-k2.5",
@@ -95,7 +108,7 @@ export async function promptCommand(text, options = {}) {
             }
         }
         else {
-            output.error(err.message);
+            output.error(getErrorMessage(err));
         }
         process.exit(1);
     }
@@ -121,7 +134,7 @@ export async function promptCommand(text, options = {}) {
             if (result.response) {
                 console.log(result.response);
             }
-            if (result.transactions && result.transactions.length > 0) {
+            if (result.transactions?.length) {
                 console.log();
                 output.dim(`${result.transactions.length} transaction(s) returned. Use the web app to review and execute.`);
             }
@@ -141,7 +154,7 @@ export async function promptCommand(text, options = {}) {
     catch (err) {
         spin.fail("Error while polling");
         emitCESP("resource.limit");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/commands/sign.js

@@ -1,6 +1,7 @@
 import { sign } from "../lib/api.js";
 import { emitCESP } from "../lib/cesp/engine.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 export async function signCommand(opts) {
     const request = {
         signatureType: opts.type,
@@ -63,7 +64,7 @@ export async function signCommand(opts) {
     catch (err) {
         spinner.stop();
         emitCESP("task.error");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/commands/sounds.js

@@ -6,6 +6,7 @@ import { tmpdir } from "node:os";
 import { readConfig, writeConfig } from "../lib/config.js";
 import { DEFAULT_SOUND_CONFIG, emitCESP, getPacksDir, listInstalledPacks, } from "../lib/cesp/engine.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 const execFileAsync = promisify(execFile);
 const REGISTRY_URL = "https://peonping.github.io/registry/index.json";
 function getSoundConfig() {
@@ -164,7 +165,7 @@ export async function soundsInstallCommand(packName) {
     }
     catch (err) {
         spin.fail("Failed to fetch registry");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
     // Download and extract
@@ -218,7 +219,7 @@ export async function soundsInstallCommand(packName) {
     }
     catch (err) {
         spin2.fail("Install failed");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -232,7 +233,7 @@ export async function soundsSearchCommand(query) {
     }
     catch (err) {
         spin.fail("Failed to fetch registry");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
     // Filter by query if provided

package/dist/commands/status.js

@@ -1,6 +1,7 @@
 import { getJobStatus } from "../lib/api.js";
 import { requireApiKey } from "../lib/config.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 export async function statusCommand(jobId) {
     requireApiKey();
     const spin = output.spinner("Fetching job status...");
@@ -31,14 +32,14 @@ export async function statusCommand(jobId) {
             console.log();
             output.error(status.error);
         }
-        if (status.transactions && status.transactions.length > 0) {
+        if (status.transactions?.length) {
             console.log();
             output.dim(`${status.transactions.length} transaction(s) attached.`);
         }
     }
     catch (err) {
         spin.fail("Failed to fetch job status");
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/commands/submit.js

@@ -1,6 +1,7 @@
 import { submit } from "../lib/api.js";
 import { emitCESP } from "../lib/cesp/engine.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 function displayResult(result) {
     if (!result.success) {
         emitCESP("task.error");
@@ -73,7 +74,7 @@ export async function submitCommand(opts) {
     }
     catch (err) {
         spinner.stop();
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -127,7 +128,7 @@ export async function submitJsonCommand(json, opts) {
     }
     catch (err) {
         spinner.stop();
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/commands/swap.js

@@ -1,7 +1,9 @@
 import { getSwapQuote, executeSwap } from "../lib/api.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 import { NATIVE_SYMBOLS, VALID_CHAINS } from "../lib/chains.js";
-import { ZERO_ADDRESS, resolveTokenSymbol } from "../lib/tokens.js";
+import { zeroAddress } from "viem";
+import { resolveTokenSymbol } from "../lib/tokens.js";
 /**
  * Resolve a token symbol or address to a contract address for swapping.
  * - The chain's native ticker (ETH/POL/BNB) or the zero address → native, sent
@@ -12,10 +14,10 @@ async function resolveSwapToken(tokenInput, chain) {
     const input = tokenInput.trim();
     const nativeSymbol = NATIVE_SYMBOLS[chain] ?? "ETH";
     const upper = input.toUpperCase();
-    const isNative = upper === nativeSymbol.toUpperCase() ||
-        input.toLowerCase() === ZERO_ADDRESS;
+    // viem's zeroAddress is already lowercase, so compare against the lowercased input.
+    const isNative = upper === nativeSymbol.toUpperCase() || input.toLowerCase() === zeroAddress;
     if (isNative) {
-        return { address: ZERO_ADDRESS, symbol: nativeSymbol };
+        return { address: zeroAddress, symbol: nativeSymbol };
     }
     return resolveTokenSymbol(input, chain);
 }
@@ -45,7 +47,7 @@ export async function swapCommand(opts) {
         resolveSpin.stop();
     }
     catch (err) {
-        resolveSpin.fail(err.message);
+        resolveSpin.fail(getErrorMessage(err));
         process.exit(1);
     }
     // Quote
@@ -62,7 +64,7 @@ export async function swapCommand(opts) {
         quoteSpin.stop();
     }
     catch (err) {
-        quoteSpin.fail(`Quote failed: ${err.message}`);
+        quoteSpin.fail(`Quote failed: ${getErrorMessage(err)}`);
         process.exit(1);
     }
     output.blank();
@@ -100,7 +102,7 @@ export async function swapCommand(opts) {
         }
     }
     catch (err) {
-        swapSpin.fail(`Swap failed: ${err.message}`);
+        swapSpin.fail(`Swap failed: ${getErrorMessage(err)}`);
         process.exit(1);
     }
 }

package/dist/commands/tokens.js

@@ -1,5 +1,6 @@
 import { searchTokens } from "../lib/api.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 export async function tokensSearchCommand(query, opts) {
     const spin = output.spinner(`Searching tokens for "${query}"...`);
     try {
@@ -22,7 +23,7 @@ export async function tokensSearchCommand(query, opts) {
         }
     }
     catch (err) {
-        spin.fail(`Search failed: ${err.message}`);
+        spin.fail(`Search failed: ${getErrorMessage(err)}`);
         process.exit(1);
     }
 }
@@ -53,7 +54,7 @@ export async function tokensInfoCommand(address, opts) {
         }
     }
     catch (err) {
-        spin.fail(`Failed to fetch token info: ${err.message}`);
+        spin.fail(`Failed to fetch token info: ${getErrorMessage(err)}`);
         process.exit(1);
     }
 }

package/dist/commands/transfer.js

@@ -1,8 +1,9 @@
 import { transfer, resolveRecipient } from "../lib/api.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 import { NATIVE_SYMBOLS } from "../lib/chains.js";
-import { isAddress } from "viem";
-import { ZERO_ADDRESS, resolveTokenSymbol } from "../lib/tokens.js";
+import { isAddress, zeroAddress } from "viem";
+import { resolveTokenSymbol } from "../lib/tokens.js";
 function looksLikeEnsName(value) {
     const v = value.trim().toLowerCase();
     return v.endsWith(".eth") || v.endsWith(".cb.id");
@@ -30,7 +31,7 @@ async function resolveTransferRecipient(raw) {
         };
     }
     catch (err) {
-        spin.fail(`ENS resolution failed for "${value}": ${err.message}`);
+        spin.fail(`ENS resolution failed for "${value}": ${getErrorMessage(err)}`);
         process.exit(1);
     }
 }
@@ -47,7 +48,8 @@ export async function transferCommand(opts) {
     let tokenAddress;
     let tokenLabel;
     if (isNative) {
-        tokenAddress = ZERO_ADDRESS;
+        // Zero address = native-token sentinel; the API detects + sanitizes it.
+        tokenAddress = zeroAddress;
         tokenLabel = NATIVE_SYMBOLS[chain] ?? "ETH";
     }
     else {
@@ -64,7 +66,7 @@ export async function transferCommand(opts) {
             }
         }
         catch (err) {
-            spin.fail(err.message);
+            spin.fail(getErrorMessage(err));
             process.exit(1);
         }
     }
@@ -86,7 +88,7 @@ export async function transferCommand(opts) {
         output.label("Tx Hash", result.txHash ?? "unknown");
     }
     catch (err) {
-        spin.fail(`Transfer failed: ${err.message}`);
+        spin.fail(`Transfer failed: ${getErrorMessage(err)}`);
         process.exit(1);
     }
 }

package/dist/commands/update.js

@@ -1,6 +1,7 @@
 import { readFileSync } from "node:fs";
 import { execSync } from "node:child_process";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 const PACKAGE_NAME = "@bankr/cli";
 /**
  * Compare two semver version strings.
@@ -79,7 +80,7 @@ export async function updateCommand(opts) {
     }
     catch (err) {
         spin.fail();
-        output.error(err.message);
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
     const cmp = compareSemver(current, latest);