@vultisig/cli 0.14.0 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @vultisig/cli
 
+## 0.15.0
+
+### Patch Changes
+
+- [#234](https://github.com/vultisig/vultisig-sdk/pull/234) [`9f71a0e`](https://github.com/vultisig/vultisig-sdk/commit/9f71a0e430aadcb96707448c5e5e077aa0b561e0) Thanks [@rcoderdev](https://github.com/rcoderdev)! - Add Vitest for the CLI package and run CLI tests from the root `yarn test` script. Unimplemented agent actions now return `success: false` with an error message instead of `success: true` with a `data.message` field.
+
+- [#235](https://github.com/vultisig/vultisig-sdk/pull/235) [`aea1c28`](https://github.com/vultisig/vultisig-sdk/commit/aea1c28051345ddef9c952108b203caa8b7fa032) Thanks [@rcoderdev](https://github.com/rcoderdev)! - ### Swap amounts (backward compatible)
+  - `SwapQuoteParams.amount` and `SwapTxParams.amount` now accept **`string | number`**. Call sites that already pass a **number** require no code changes.
+  - Human-readable swap amounts can be passed as **decimal strings** end-to-end (compound `vault.swap()`, `getSwapQuote`, `prepareSwapTx`, CLI agent), avoiding precision loss from `Number()` / `parseFloat()` on extreme magnitudes or fractional digits.
+  - `toChainAmount` accepts **`string | number`**; whitespace-only / empty strings throw instead of being treated as zero.
+
+  ### Send preparation (stricter validation)
+  - `prepareSendTx` and `estimateSendFee` reject **zero or negative** `amount` in base units. This aligns with real transfers; payloads with `toAmount: "0"` are no longer built for native/token sends.
+  - **Zero-value EVM contract calls** are unchanged: use `prepareContractCallTx` (or `vault.contractCall()`), which still builds via the internal path that allows `value: 0n`.
+
+  ### Other
+  - Swap approval sizing uses `toChainAmount` instead of float scaling for required allowance.
+  - `@vultisig/rujira` (source): `VultisigSignature.format` includes **`MLDSA`** to match SDK `Signature` — type-only widening, no runtime change; Rujira will pick up a **patch** version via normal dependency releases when published next.
+  - CLI: direct **`viem`** dependency; Solana local swap human amount via `formatUnits`; agent SSE `Transaction` typing includes optional `swap_tx` / `send_tx` / `tx`.
+
+  **Semver:** **Minor** for `@vultisig/core-chain`, `@vultisig/core-mpc`, and `@vultisig/sdk` (additive types + intentional validation tightening). **`@vultisig/cli` is linked to the SDK** in Changesets config, so it receives the same minor bump. This is **not** a SemVer **major** for integration purposes: swap inputs are only widened; `prepareSendTx({ amount: 0n })` was never a valid broadcast path.
+
+  **Release tooling note:** `yarn changeset status` may still propose a **major** version for `@vultisig/rujira` when the SDK minors, even though the only Rujira change is adding `'MLDSA'` to a string-literal union (fully backward compatible). Review the Version Packages PR and **downgrade Rujira to patch** if your policy is to reserve majors for real breaking API changes.
+
+  **`@vultisig/sdk` is 0.x:** per [SemVer](https://semver.org/#spec-item-4), minor releases on `0.y.z` may include behavior changes; consumers pinning `^0.14.0` should still accept `0.15.0` but should read changelog for validation tightening.
+
+- Updated dependencies [[`9f71a0e`](https://github.com/vultisig/vultisig-sdk/commit/9f71a0e430aadcb96707448c5e5e077aa0b561e0), [`aea1c28`](https://github.com/vultisig/vultisig-sdk/commit/aea1c28051345ddef9c952108b203caa8b7fa032)]:
+  - @vultisig/sdk@0.15.0
+  - @vultisig/rujira@10.0.0
+
+## 0.14.2
+
+### Patch Changes
+
+- [#233](https://github.com/vultisig/vultisig-sdk/pull/233) [`a0387b4`](https://github.com/vultisig/vultisig-sdk/commit/a0387b42b816c26fedf71a089fb461257d331be7) Thanks [@rcoderdev](https://github.com/rcoderdev)! - CLI agent executor now surfaces unimplemented and stub actions as failures (`success: false`) instead of returning misleading success. Removed `get_market_price` and `thorchain_query` from the local auto-execute allowlist where there is no implementation.
+
 ## 0.14.0
 
 ### Patch Changes

package/dist/index.js

@@ -1430,6 +1430,25 @@ var init_sha3 = __esm({
   }
 });
 
+// node_modules/viem/_esm/utils/unit/formatUnits.js
+function formatUnits(value, decimals) {
+  let display = value.toString();
+  const negative = display.startsWith("-");
+  if (negative)
+    display = display.slice(1);
+  display = display.padStart(decimals, "0");
+  let [integer, fraction] = [
+    display.slice(0, display.length - decimals),
+    display.slice(display.length - decimals)
+  ];
+  fraction = fraction.replace(/(0+)$/, "");
+  return `${negative ? "-" : ""}${integer || "0"}${fraction ? `.${fraction}` : ""}`;
+}
+var init_formatUnits = __esm({
+  "node_modules/viem/_esm/utils/unit/formatUnits.js"() {
+  }
+});
+
 // src/index.ts
 import "dotenv/config";
 import { promises as fs4 } from "node:fs";
@@ -4765,6 +4784,9 @@ function getNativeTokenDecimals(chain) {
 // src/agent/executor.ts
 import { Chain as Chain9, Vultisig as Vultisig6 } from "@vultisig/sdk";
 
+// node_modules/viem/_esm/index.js
+init_formatUnits();
+
 // src/core/VaultStateStore.ts
 import * as fs2 from "node:fs";
 import * as os from "node:os";
@@ -4929,7 +4951,6 @@ var AUTO_EXECUTE_ACTIONS = /* @__PURE__ */ new Set([
   "address_book_add",
   "address_book_remove",
   "get_address_book",
-  "get_market_price",
   "get_balances",
   "get_portfolio",
   "search_token",
@@ -4941,8 +4962,7 @@ var AUTO_EXECUTE_ACTIONS = /* @__PURE__ */ new Set([
   "sign_tx",
   "sign_typed_data",
   "read_evm_contract",
-  "scan_tx",
-  "thorchain_query"
+  "scan_tx"
 ]);
 var PASSWORD_REQUIRED_ACTIONS = /* @__PURE__ */ new Set(["sign_tx", "sign_typed_data", "build_custom_tx"]);
 
@@ -5103,7 +5123,9 @@ var AgentExecutor = class {
       case "read_evm_contract":
         return this.readEvmContract(params);
       default:
-        return { message: `Action type '${action.type}' not implemented locally` };
+        throw new Error(
+          `Action type '${action.type}' is not implemented locally. The backend may handle this action server-side.`
+        );
     }
   }
   // ============================================================================
@@ -5289,12 +5311,12 @@ var AgentExecutor = class {
       const quote = await this.vault.getSwapQuote({
         fromCoin,
         toCoin,
-        amount: parseFloat(amountStr)
+        amount: amountStr
       });
       const swapResult = await this.vault.prepareSwapTx({
         fromCoin,
         toCoin,
-        amount: parseFloat(amountStr),
+        amount: amountStr,
         swapQuote: quote,
         autoApprove: true
       });
@@ -5595,6 +5617,11 @@ var AgentExecutor = class {
    * Uses swap params from the tx_ready event to call vault.getSwapQuote → prepareSwapTx.
    */
   async buildAndSignSolanaSwapLocally(serverTxData) {
+    if (serverTxData._phase === "prepare") {
+      throw Object.assign(new Error("tx_ready prepare phase: deferring to server sign path"), {
+        _phase: "prepare"
+      });
+    }
     const fromChainName = serverTxData.from_chain || serverTxData.chain || "Solana";
     const toChainName = serverTxData.to_chain;
     const fromChain = resolveChain(fromChainName);
@@ -5615,10 +5642,17 @@ var AgentExecutor = class {
       });
     const fromCoin = { chain: fromChain, token: fromToken || void 0 };
     const toCoin = { chain: toChain, token: toToken || void 0 };
-    const humanAmount = Number(amountStr) / Math.pow(10, fromDecimals);
+    let humanAmount;
+    try {
+      humanAmount = formatUnits(BigInt(amountStr), fromDecimals);
+    } catch {
+      throw Object.assign(new Error(`Invalid amount in tx_ready data for local Solana swap build: ${amountStr}`), {
+        _phase: "prepare"
+      });
+    }
     if (this.verbose)
       process.stderr.write(
-        `[solana_local_swap] from=${fromChainName} to=${toChainName || fromChainName} amount=${amountStr}
+        `[solana_local_swap] from=${fromChainName} to=${toChainName || fromChainName} amount=${amountStr} human=${humanAmount}
 `
       );
     if (this.vault.isEncrypted && !this.vault.isUnlocked?.()) {
@@ -5909,19 +5943,21 @@ var AgentExecutor = class {
   // Address Book
   // ============================================================================
   async getAddressBook() {
-    return { entries: [], message: "Address book retrieved" };
+    throw new Error("get_address_book is not yet implemented locally. The backend may handle this action server-side.");
   }
-  async addAddressBookEntry(params) {
-    return { added: true, name: params.name, address: params.address, chain: params.chain };
+  async addAddressBookEntry(_params) {
+    throw new Error("address_book_add is not yet implemented locally. The backend may handle this action server-side.");
   }
-  async removeAddressBookEntry(params) {
-    return { removed: true, address: params.address };
+  async removeAddressBookEntry(_params) {
+    throw new Error(
+      "address_book_remove is not yet implemented locally. The backend may handle this action server-side."
+    );
   }
   // ============================================================================
   // Token Search & Other
   // ============================================================================
-  async searchToken(params) {
-    return { message: `Token search for '${params.query || params.symbol}' - delegated to backend` };
+  async searchToken(_params) {
+    throw new Error("search_token is not yet implemented locally. The backend may handle this action server-side.");
   }
   async listVaults() {
     return {
@@ -5935,11 +5971,11 @@ var AgentExecutor = class {
       ]
     };
   }
-  async scanTx(params) {
-    return { message: `Transaction scan for ${params.tx_hash || "unknown"} - delegated to backend` };
+  async scanTx(_params) {
+    throw new Error("scan_tx is not yet implemented locally. The backend may handle this action server-side.");
   }
-  async readEvmContract(params) {
-    return { message: `EVM contract read for ${params.contract || "unknown"} - delegated to backend` };
+  async readEvmContract(_params) {
+    throw new Error("read_evm_contract is not yet implemented locally. The backend may handle this action server-side.");
   }
 };
 async function encodeContractCall(functionName, params) {
@@ -8792,7 +8828,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "0.14.0";
+    cachedVersion = "0.15.0";
     return cachedVersion;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Command-line wallet for Vultisig - multi-chain MPC wallet management",
   "type": "module",
   "bin": {
@@ -21,6 +21,7 @@
     "cli:interactive": "npx tsx src/index.ts --interactive",
     "repl": "npx tsx src/index.ts --interactive",
     "typecheck": "tsc --noEmit",
+    "test": "vitest run",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
@@ -53,8 +54,8 @@
     "@cosmjs/proto-signing": "^0.38.1",
     "@cosmjs/stargate": "^0.38.1",
     "@noble/hashes": "^2.0.1",
-    "@vultisig/rujira": "^9.0.0",
-    "@vultisig/sdk": "^0.14.1",
+    "@vultisig/rujira": "^10.0.0",
+    "@vultisig/sdk": "^0.15.1",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^14.0.3",
@@ -62,6 +63,7 @@
     "ora": "^9.3.0",
     "qrcode-terminal": "^0.12.0",
     "tabtab": "^3.0.2",
+    "viem": "^2.45.1",
     "ws": "^8.19.0"
   },
   "devDependencies": {
@@ -71,7 +73,8 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.27.4",
     "tsx": "^4.21.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4"
   },
   "engines": {
     "node": ">=20.0.0"