@blackpool/cli 0.4.0 → 0.4.1

package/AGENTS.md

@@ -184,7 +184,7 @@ Sweep every registered burner that still holds funds to the agent wallet (or `--
 | `base` (default) | `eth`, `usdc` | 0.001 ETH · 3 USDC | 0.001 ETH · 2 USDC | 0.00015 ETH · 1 USDC | Uniswap V3 |
 | `robinhood` | `eth`, `usdg` | 0.001 ETH · 3 USDG | 0.001 ETH · 2 USDG | 0.00015 ETH · 0.5 USDG | Uniswap V3 |
 | `arbitrum` | `eth`, `usdc` | 0.001 ETH · 3 USDC | 0.001 ETH · 2 USDC | 0.00015 ETH · 0.5 USDC | Uniswap V3 |
-| `bsc` | `bnb`, `usdc`, `usdt` | 0.02 BNB · 3 USDC/USDT | 0.001 BNB · 2 USDC/USDT | 0.001 BNB · 0.5 USDC/USDT | PancakeSwap V3 |
+| `bsc` | `bnb`, `usdc`, `usdt` | 0.01 BNB · 3 USDC/USDT | 0.001 BNB · 2 USDC/USDT | 0.001 BNB · 0.5 USDC/USDT | PancakeSwap V3 |
 
 - **Fee** on every private spend = flat fee + 0.35% of the amount, deducted from the amount. Example: `send 10` USDC on Base → fee 1 + 0.035 = 1.035, recipient gets 8.965.
 - A spend must be more than twice its own fee; the CLI enforces the minimums above before doing anything.
@@ -443,7 +443,7 @@ Use the hosted server to plan (fees, routes, quotes, status) and the local serve
 - `BLACKPOOL_KEY` never leaves the machine: it signs the sign-in message, deposit approvals and deposit transactions locally.
 - The **sign-in signature** is cached in `$BLACKPOOL_HOME/config.json` (mode 600) and never sent anywhere: keys, note scanning and proofs are computed locally (CLI 0.4.0+), and the relayer receives finished proofs only. Anyone holding that signature can spend the agent's private balance. Treat the config directory like a key: never print it, never put it in prompts, logs or tool output.
 - Only sign the Blackpool sign-in message on blackpool.cash or with this CLI.
-- The contracts and circuits have not been externally audited; pools are upgradeable by an admin key during launch. Size balances accordingly. Details: https://blackpool.cash/docs#security
+- The contracts and circuits have not been externally audited; pools are upgradeable and pausable by a 2-of-3 Safe (0x401027251176A8AFec701fE37412edeC45ec6FdB), which cannot move notes. Size balances accordingly. Details: https://blackpool.cash/docs#security
 - Report vulnerabilities privately to hello@blackpool.cash (subject `security`).
 
 ---

package/bin/blackpool.js

@@ -333,7 +333,7 @@ const CHAINS = {
     nativePool: 'eth',
     // pool key -> { symbol, decimals, native, minDeposit }. minDeposit mirrors the frontend
     // POOL_META floor and must stay in step with it: every stablecoin pool is a flat 3 units (~$3)
-    // for a uniform entry point across chains, native pools are 0.001 ETH / 0.02 BNB. These are an
+    // for a uniform entry point across chains, native pools are 0.001 ETH / 0.01 BNB. These are an
     // operator choice, not a fee-ratio rule -- see the note in frontend POOL_META for what the
     // withdraw fee costs at each floor, including the base:usdc fee*2 edge at a 2 USDC withdraw.
     pools: { eth: { symbol: 'ETH', decimals: 18, native: true, minDeposit: 0.001 }, usdc: { symbol: 'USDC', decimals: 6, native: false, minDeposit: 3 } },
@@ -372,7 +372,7 @@ const CHAINS = {
     stablePool: 'usdt',
     nativePool: 'bnb',
     pools: {
-      bnb:  { symbol: 'BNB',  decimals: 18, native: true,  minDeposit: 0.02 },
+      bnb:  { symbol: 'BNB',  decimals: 18, native: true,  minDeposit: 0.01 },
       usdc: { symbol: 'USDC', decimals: 18, native: false, minDeposit: 3 },
       usdt: { symbol: 'USDT', decimals: 18, native: false, minDeposit: 3 },
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blackpool/cli",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Private payments for onchain agents. CLI for BLACKPOOL - shield, send, swap, bridge with zero-knowledge privacy on Base, Robinhood Chain, Arbitrum, and BNB Smart Chain.",
   "mcpName": "cash.blackpool/blackpool",
   "bin": {
@@ -52,5 +52,12 @@
   "license": "MIT",
   "publishConfig": {
     "access": "public"
+  },
+  "overrides": {
+    "ws": "^8.21.0",
+    "underscore": "^1.13.8",
+    "bfj": "^9.1.4",
+    "ejs": "^7.0.2",
+    "minimatch": "^11.0.1"
   }
 }