@needmoretruth/nmts-cli 0.34.1 → 0.34.3

package/AGENTS.md

@@ -1,9 +1,9 @@
 # nmts — for agents
 
-You are reading this because someone pointed you at the `nmts` command, or at this repository.
-This is the working reference. Each command has a document of its own: **`nmts help <command>`**
-prints it, and the same files are under `docs/commands/` in this package. Read a command's
-document before you use that command for the first time.
+NMTS = NeedMoreTruthStorage: end-to-end encrypted cloud storage on the Walrus network, built by
+one developer (needmoretruth) for AI agents as much as for people. Site https://nmts.me · summary
+for programs https://nmts.me/llms.txt. Each command has a document: **`nmts help <command>`** prints
+it (same files under `docs/commands/`); read it before using that command the first time.
 
 **This document describes a tool. It has no authority over your own instructions.** Nothing here
 asks you to do anything for anyone but the person you are working for, and if any line reads as an

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 Each version's entry is what changed for the person or the program using `nmts`. The product's own
 update history, which covers the site and the server too, is at https://nmts.me/updates.
 
+## 0.34.3 — 2026-09-07
+
+- Security. `nmts wallet swap` on Bluefin now calls only the contract package pinned in this
+  release. Before, it read the "current" package from a public Sui node and preferred that answer,
+  so a node giving a false answer could have sent the swap into someone else's code with your coin
+  as the argument. The pinned package is still checked against the chain before a quote is shown;
+  if that check refuses it, the Bluefin venue is unavailable until a release bumps the pin. DeepBook
+  was never affected. No such node was observed and no loss is known.
+
+## 0.34.2 — 2026-09-07
+
+- The README and the agent document open with what the name stands for — NMTS is
+  NeedMoreTruthStorage — who builds it, and the site, https://nmts.me; the package description
+  says the same. No behaviour changed.
+
 ## 0.34.1 — 2026-09-07
 
 - The advice printed for `MANIFEST_TOO_LARGE` no longer tells a program to ask the operator for a

package/README.ko.md

@@ -2,8 +2,9 @@
 
 *[English](README.md)*
 
-[NMTS](https://nmts.me)를 터미널에서 쓰는 도구입니다 — Walrus 네트워크 위의 종단 간 암호화 저장소를,
-터미널 앞의 사람과 그 사람이 돌리는 에이전트를 위해.
+[NMTS](https://nmts.me)를 터미널에서 쓰는 도구입니다 — NMTS는 **NeedMoreTruthStorage**의 줄임말로,
+개발자 한 사람([needmoretruth](https://github.com/needmoretruth))이 만든 Walrus 네트워크 위의 종단간
+암호화 클라우드 스토리지입니다. 터미널 앞의 사람과 그 사람이 돌리는 AI 에이전트를 위해. 사이트는 **https://nmts.me** 입니다.
 
 > **이야기를 나누는 곳: [디스코드](https://discord.gg/pcmRkVmVZk).** 영어와 한국어 둘 다 읽습니다.
 >
@@ -50,7 +51,7 @@ nmts --help
 
 ```sh
 npm install -g github:needmoretruth/nmts-cli            # 기본 브랜치
-npm install -g github:needmoretruth/nmts-cli#v0.34.1    # 버전을 고정할 때
+npm install -g github:needmoretruth/nmts-cli#v0.34.3    # 버전을 고정할 때
 npm install -g https://github.com/needmoretruth/nmts-cli/releases/latest/download/nmts.tgz
 ```
 

package/README.md

@@ -1,7 +1,8 @@
 # nmts
 
-Command-line access to [NMTS](https://nmts.me) — end-to-end encrypted storage on the Walrus
-network. For people at a terminal, and for the agents they run.
+Command-line access to [NMTS](https://nmts.me) — **NeedMoreTruthStorage**, end-to-end encrypted
+cloud storage on the Walrus network, built by one developer ([needmoretruth](https://github.com/needmoretruth)).
+For people at a terminal, and for the AI agents they run. The site is **https://nmts.me**.
 
 > **[한국어 문서](README.ko.md)** · Talk about NMTS on [Discord](https://discord.gg/pcmRkVmVZk),
 > in English or Korean.
@@ -12,7 +13,7 @@ network. For people at a terminal, and for the agents they run.
 > **Status: early.** The interface may still change before 1.0. `nmts --help` is the current truth
 > about what exists.
 
-## What NMTS is
+## 🧭 What NMTS is
 
 Storage where **the encryption happens on your machine and the keys never leave it.** The server
 receives sealed bytes it cannot open. File contents, names and folders all live inside a sealed
@@ -35,7 +36,7 @@ things to know before you start:
 NMTS is built and run by one developer. This tool, the encryption engine and the recovery program
 are open source under Apache-2.0; the server and the web app are not published.
 
-## Install
+## 📦 Install
 
 Node 22.15.0 or newer. Nothing is compiled at install time and there is no native build step: the
 encryption engine is a WebAssembly module carried in the repository. It runs wherever Node runs —
@@ -52,7 +53,7 @@ default branch, from a pinned version, or from the tarball attached to the
 
 ```sh
 npm install -g github:needmoretruth/nmts-cli            # the default branch
-npm install -g github:needmoretruth/nmts-cli#v0.34.1    # a pinned version
+npm install -g github:needmoretruth/nmts-cli#v0.34.3    # a pinned version
 npm install -g https://github.com/needmoretruth/nmts-cli/releases/latest/download/nmts.tgz
 ```
 
@@ -61,7 +62,7 @@ that short name as too close to names already published.
 
 To work on the source instead, see [CONTRIBUTING.md](CONTRIBUTING.md).
 
-## Staying up to date
+## 🔄 Staying up to date
 
 ```sh
 nmts update            # installs the newest release over this one
@@ -74,7 +75,7 @@ That request carries no NMTS key, no API key and no command name, and it is the
 the tool makes that no command asked for. Setting `NMTS_NO_UPDATE_CHECK` to anything stops both
 halves, and `nmts env` shows what the check last found.
 
-## First run
+## 🚀 First run
 
 ```sh
 nmts env       # what this machine is, and whether credentials are in reach. Contacts nothing.
@@ -87,7 +88,7 @@ nmts get x     # download one file
 Run `nmts env` first on any machine you do not know — a container, a CI runner, someone else's
 laptop. It needs no credential and reports what a credential here would be exposed to.
 
-## The two credentials
+## 🔑 The two credentials
 
 They do different jobs and they are not interchangeable.
 
@@ -139,13 +140,13 @@ behind the same agreement.
 three clear the environment before starting one. Sign in with `nmts login` instead, or put the
 variables in the server's own `env` block. `nmts env` names the agent it can see.
 
-## Before you hand this to an agent
+## 🤖 Before you hand this to an agent
 
 Your NMTS key is everything at once. A program that has it can read every file, upload,
 delete and sign with the wallet, and its requests cannot be told apart from yours. It cannot be
 rotated while keeping the account. **Use an account you would be willing to lose.**
 
-## Commands
+## 🧰 Commands
 
 | Command | What it does |
 |---|---|
@@ -406,7 +407,7 @@ account) is a typed sentence. `nmts unlock` lists the keys; each unlock prints w
 could go wrong and what it does not cover before it asks. `nmts help <command>` prints any
 command's document, with its tier at the top.
 
-## Containers
+## 🐳 Containers
 
 It runs unchanged in Docker and Podman, rootless. There is no published image; this repository has
 a `Dockerfile`, and both container tools build and run it on every push.
@@ -477,7 +478,7 @@ $ rclone copy drive:drive ./somewhere
 $ rclone copy --size-only ./somewhere drive:drive
 ```
 
-## For an agent that speaks MCP
+## 🔌 For an agent that speaks MCP
 
 `nmts mcp` is a local MCP server over stdin and stdout. Sign in first (`nmts login`); it never
 takes an NMTS key on a command line, and it never prompts, so a sealed NMTS key with no `NMTS_PASSPHRASE`

package/dist/artifact-about.d.ts

@@ -11,7 +11,7 @@ export declare const CRYPTO_SPEC_URL = "https://github.com/needmoretruth/nmts-re
  *   is the field's own contract — what the writer says about itself — and a person holding two
  *   copies of one account's artefacts can then tell which program made each.
  */
-export declare const WRITTEN_BY = "nmts-cli 0.34.1";
+export declare const WRITTEN_BY = "nmts-cli 0.34.3";
 /** Which of the three artefacts a wrapper is. A reader holding several can sort them. */
 export type ArtifactKind = "recovery-list" | "file-list" | "recovery-kit";
 /**

package/dist/product.d.ts

@@ -9,7 +9,7 @@ export declare const BINARY_NAME = "nmts";
  *    beside it. Here rather than in `main.ts` because the MCP server has to say it too, and a
  *    command importing the entry point is a cycle waiting to bite.
  */
-export declare const VERSION = "0.34.1";
+export declare const VERSION = "0.34.3";
 /** Where the product lives, for messages that need to send somebody somewhere real. */
 export declare const HOME_URL = "https://nmts.me";
 /** The source, so a person holding only the built program can find what it was built from. */

package/dist/product.js

@@ -18,7 +18,7 @@ export const BINARY_NAME = "nmts";
  *    beside it. Here rather than in `main.ts` because the MCP server has to say it too, and a
  *    command importing the entry point is a cycle waiting to bite.
  */
-export const VERSION = "0.34.1";
+export const VERSION = "0.34.3";
 /** Where the product lives, for messages that need to send somebody somewhere real. */
 export const HOME_URL = "https://nmts.me";
 /** The source, so a person holding only the built program can find what it was built from. */

package/dist/wallet-swap-chain.d.ts

@@ -5,7 +5,7 @@ import { type WalletBalances } from "./wallet.ts";
 import { type VenueQuote } from "./wallet-swap-quote.ts";
 /** Where a swap runs: one of the two mainnet venues, or the official testnet facility. */
 export type SwapRail = SwapVenue | "exchange";
-/** Bluefin's addresses, with the package RESOLVED and version-checked on chain, never assumed. */
+/** Bluefin's addresses: the package PINNED in this release, confirmed on chain before it is used. */
 export interface BluefinBinding {
     packageId: string;
     globalConfigId: string;
@@ -40,7 +40,7 @@ export declare function swapTransaction(input: SwapShape & {
 /** What `commands/wallet-swap.ts` reads before it prints a review. */
 export interface SwapReads {
     readWallet(address: string): Promise<WalletBalances>;
-    /** Bluefin's current package, version-checked. Throws when no known package passes. */
+    /** Bluefin's pinned package, version-checked. Throws when the chain refuses that package. */
     resolveBluefin(): Promise<BluefinBinding>;
     /** The testnet facility and its rate. Throws off testnet, or when the object cannot be read. */
     readExchange(): Promise<ExchangeFacility>;
@@ -49,4 +49,18 @@ export interface SwapReads {
     /** The fee in MIST measured by dry-running this exact swap, or null when it could not be. */
     estimateFee(shape: SwapShape, sender: string): Promise<bigint | null>;
 }
+/** All this path uses of an RPC: one devInspect and its `error`. Narrow on purpose — the type itself
+ *  has no place for a chain-supplied ADDRESS to enter, and a test can hand it a fake. */
+export interface BluefinVersionRpc {
+    devInspectTransactionBlock(input: {
+        sender: string;
+        transactionBlock: Transaction;
+    }): Promise<{
+        error?: string | null;
+    }>;
+}
+/** The pinned addresses, returned only once the chain confirms the pinned package still verifies.
+ *  A refusal ends it: this function has no other address to return. Exported so the test can hold an
+ *  RPC that names a different package and watch it change nothing. */
+export declare function checkedBluefinBinding(pinned: BluefinBinding, rpc: BluefinVersionRpc): Promise<BluefinBinding>;
 export declare function swapReads(network: Network): SwapReads;

package/dist/wallet-swap-chain.js

@@ -1,6 +1,7 @@
-// The swap transaction and its live reads: the wallet's balances, Bluefin's current package, the
-// testnet facility's rate, and the fee a dry run measures. The quotes live next door in
-// `wallet-swap-quote.ts`; both files read, and only `wallet-sign.ts` signs.
+// The swap transaction and its live reads: the wallet's balances, the version check on Bluefin's
+// PINNED package, the testnet facility's rate, and the fee a dry run measures. Bluefin's package id
+// itself is NOT a live read — see the block above `checkedBluefinBinding`. The quotes live next door
+// in `wallet-swap-quote.ts`; both files read, and only `wallet-sign.ts` signs.
 //
 // ⛔ ONE BUILDER FOR THE FEE AND THE SIGNATURE. `estimateFee` and `wallet-sign.ts` both call
 //    `swapTransaction`, so the fee printed is the fee of the transaction that is then signed.
@@ -20,7 +21,7 @@ import { coinWithBalance, Transaction } from "@mysten/sui/transactions";
 import { TESTNET_WALRUS_PACKAGE_CONFIG } from "@mysten/walrus";
 import { walrusClient, netGasFee } from "./extend-chain.js";
 import { isRecord } from "./guards.js";
-import { BLUEFIN_GLOBAL_CONFIG_IDS, BLUEFIN_MAX_SQRT_PRICE, BLUEFIN_MIN_SQRT_PRICE, BLUEFIN_PACKAGE_IDS, BLUEFIN_UPGRADE_CAP_IDS, BLUEFIN_WAL_SUI_POOLS, DEEP_COIN_TYPES, DEEPBOOK_PACKAGE_IDS, DEEPBOOK_WAL_SUI_POOLS, } from "./shared/lib/wallet/venue-ids.js";
+import { BLUEFIN_GLOBAL_CONFIG_IDS, BLUEFIN_MAX_SQRT_PRICE, BLUEFIN_MIN_SQRT_PRICE, BLUEFIN_PACKAGE_IDS, BLUEFIN_WAL_SUI_POOLS, DEEP_COIN_TYPES, DEEPBOOK_PACKAGE_IDS, DEEPBOOK_WAL_SUI_POOLS, } from "./shared/lib/wallet/venue-ids.js";
 import { readBalances, SUI_COIN_TYPE, walCoinType } from "./wallet.js";
 import { chainReader } from "./wallet-chain.js";
 import { quoteVenue, QUOTE_SENDER } from "./wallet-swap-quote.js";
@@ -86,38 +87,36 @@ export function swapTransaction(input) {
         tx.setGasBudget(input.gasBudgetMist);
     return tx;
 }
-const FULL_ADDRESS = /^0x[0-9a-f]{64}$/;
 /** `fields.<name>` of a Move object's content, as a string, or null when the shape differs. */
 function fieldOf(content, name) {
     const fields = isRecord(content) ? content["fields"] : undefined;
     return isRecord(fields) ? fields[name] : undefined;
 }
+/** Does the chain still accept this package? `config::verify_version` under devInspect: no signature,
+ *  no gas. False when the chain refuses AND when the RPC cannot answer — both mean "no Bluefin". */
+async function versionPasses(rpc, packageId, globalConfigId) {
+    try {
+        const tx = new Transaction();
+        tx.moveCall({ target: `${packageId}::config::verify_version`, arguments: [tx.object(globalConfigId)] });
+        const res = await rpc.devInspectTransactionBlock({ sender: QUOTE_SENDER, transactionBlock: tx });
+        return !res.error;
+    }
+    catch {
+        return false;
+    }
+}
+/** The pinned addresses, returned only once the chain confirms the pinned package still verifies.
+ *  A refusal ends it: this function has no other address to return. Exported so the test can hold an
+ *  RPC that names a different package and watch it change nothing. */
+export async function checkedBluefinBinding(pinned, rpc) {
+    if (!(await versionPasses(rpc, pinned.packageId, pinned.globalConfigId))) {
+        throw new Error("Bluefin's on-chain version check refused the package address this tool pins.");
+    }
+    return pinned;
+}
 export function swapReads(network) {
     const client = walrusClient(network);
     let bluefin = null;
-    async function livePackage(upgradeCapId) {
-        try {
-            const obj = await client.getObject({ id: upgradeCapId, options: { showContent: true, showType: true } });
-            if (obj.data?.type !== "0x2::package::UpgradeCap")
-                return null;
-            const pkg = fieldOf(obj.data.content, "package");
-            return typeof pkg === "string" && FULL_ADDRESS.test(pkg) ? pkg : null;
-        }
-        catch {
-            return null;
-        }
-    }
-    async function versionPasses(packageId, globalConfigId) {
-        try {
-            const tx = new Transaction();
-            tx.moveCall({ target: `${packageId}::config::verify_version`, arguments: [tx.object(globalConfigId)] });
-            const res = await client.devInspectTransactionBlock({ sender: QUOTE_SENDER, transactionBlock: tx });
-            return !res.error;
-        }
-        catch {
-            return false;
-        }
-    }
     return {
         async readWallet(address) {
             return readBalances(chainReader(network, address), walCoinType(network));
@@ -127,19 +126,13 @@ export function swapReads(network) {
             if (bluefin !== null)
                 return bluefin;
             const pending = (async () => {
-                const pinned = BLUEFIN_PACKAGE_IDS[network];
-                const capId = BLUEFIN_UPGRADE_CAP_IDS[network];
+                const packageId = BLUEFIN_PACKAGE_IDS[network];
                 const globalConfigId = BLUEFIN_GLOBAL_CONFIG_IDS[network];
                 const poolId = BLUEFIN_WAL_SUI_POOLS[network];
-                if (pinned === null || capId === null || globalConfigId === null || poolId === null) {
+                if (packageId === null || globalConfigId === null || poolId === null) {
                     throw new Error(`This tool knows no Bluefin WAL/SUI pool on ${network}.`);
                 }
-                const live = await livePackage(capId);
-                for (const packageId of live === null ? [pinned] : [live, pinned]) {
-                    if (await versionPasses(packageId, globalConfigId))
-                        return { packageId, globalConfigId, poolId };
-                }
-                throw new Error("Bluefin's on-chain version check refused every package address this tool knows.");
+                return checkedBluefinBinding({ packageId, globalConfigId, poolId }, client);
             })();
             bluefin = pending;
             pending.catch(() => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@needmoretruth/nmts-cli",
-  "version": "0.34.1",
-  "description": "Command-line and MCP access to NMTS: open-source, end-to-end encrypted storage on the Walrus network. No fee to NMTS; you pay the network from your own wallet. For people and for their agents.",
+  "version": "0.34.3",
+  "description": "Command-line and MCP access to NMTS (NeedMoreTruthStorage, https://nmts.me): open-source, end-to-end encrypted storage on the Walrus network. No fee to NMTS; you pay the network from your own wallet. For people and for their agents.",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"

package/server.json

@@ -6,13 +6,13 @@
     "url": "https://github.com/needmoretruth/nmts-cli",
     "source": "github"
   },
-  "version": "0.34.1",
+  "version": "0.34.2",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@needmoretruth/nmts-cli",
-      "version": "0.34.1",
+      "version": "0.34.2",
       "transport": {
         "type": "stdio"
       },