@vultisig/cli 0.19.0 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # @vultisig/cli
 
+## 0.21.0
+
+### Minor Changes
+
+- [#350](https://github.com/vultisig/vultisig-sdk/pull/350) [`bad88d8`](https://github.com/vultisig/vultisig-sdk/commit/bad88d8d87229284c739995c027eb33d3ffc19e3) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - feat: cosmos-sdk staking module - generic Delegate/Undelegate/BeginRedelegate/WithdrawDelegatorReward + LCD queries
+
+  Adds the cosmos-sdk staking + distribution module to the SDK, generic across every ibcEnabled cosmos chain we support (Cosmos Hub, Osmosis, Kujira, Terra, TerraClassic, Akash, Noble, Dydx).
+
+  **Signing primitives** (`@vultisig/sdk` -> `chains.cosmos.buildCosmosStakingTx`):
+  - `MsgDelegate`, `MsgUndelegate`, `MsgBeginRedelegate`, `MsgWithdrawDelegatorReward`
+  - Hand-rolled RN-safe protobuf (no cosmjs runtime dep) mirroring the existing `buildCosmosWasmExecuteTx` pattern
+  - Multi-msg batch txs supported (e.g. claim rewards from many validators in one tx)
+  - Byte-for-byte round-trip verified against `cosmjs-types` canonical decoder
+
+  **LCD query helpers** (`@vultisig/sdk` top-level + `@vultisig/core-chain/chains/cosmos/staking/lcdQueries`):
+  - `getCosmosDelegations(chain, address)` -> per-validator balance + shares
+  - `getCosmosUnbondingDelegations(chain, address)` -> pending unbondings with completion time
+  - `getCosmosDelegatorRewards(chain, address)` -> per-validator rewards + total
+  - `getCosmosVestingAccount(chain, address)` -> Periodic / Continuous / Delayed detection (returns null otherwise)
+
+  ship-once, unlock-many: adding a future cosmos chain is a config-only change.
+
+  34 new unit tests including 4 real cosmoshub fixtures captured from `cosmos1a8l3srqyk5krvzhkt7cyzy52yxcght6322w2qy`.
+
+### Patch Changes
+
+- Updated dependencies [[`bad88d8`](https://github.com/vultisig/vultisig-sdk/commit/bad88d8d87229284c739995c027eb33d3ffc19e3)]:
+  - @vultisig/sdk@0.21.0
+  - @vultisig/client-shared@0.2.5
+  - @vultisig/rujira@16.0.0
+
+## 0.20.0
+
+### Patch Changes
+
+- Updated dependencies [[`1d1c02c`](https://github.com/vultisig/vultisig-sdk/commit/1d1c02c37e58340b0617eec3a5e44909efc9b452)]:
+  - @vultisig/sdk@0.20.0
+  - @vultisig/client-shared@0.2.4
+  - @vultisig/rujira@15.0.0
+
 ## 0.19.0
 
 ### Patch Changes

package/dist/index.js

@@ -1654,7 +1654,7 @@ var thorchainMidgardBaseUrl, POOL_ID_RE, assertValidPoolId, isValidPoolId, norma
 var init_pools = __esm({
   "../../packages/core/chain/dist/chains/cosmos/thor/lp/pools.js"() {
     init_queryUrl();
-    thorchainMidgardBaseUrl = "https://midgard.ninerealms.com";
+    thorchainMidgardBaseUrl = "https://midgard.thorchain.network";
     POOL_ID_RE = /^[A-Z0-9]+\.[A-Z0-9]+(-[A-Z0-9]+)?$/;
     assertValidPoolId = (pool) => {
       if (typeof pool !== "string" || pool.length === 0) {
@@ -6091,6 +6091,11 @@ var AgentClient = class {
           }
           const toolName = inlineName ?? (callId ? toolNameByCallId.get(callId) : void 0);
           const label = typeof parsed.label === "string" ? parsed.label : void 0;
+          if (v1Type === "tool-input-available" && parsed.clientExecuted === true && callId && toolName && callbacks.onClientSideToolCall) {
+            const rawInput = parsed.input;
+            const input = rawInput && typeof rawInput === "object" && !Array.isArray(rawInput) ? rawInput : {};
+            callbacks.onClientSideToolCall(callId, toolName, input);
+          }
           if (status && toolName) {
             callbacks.onToolProgress?.(toolName, status, label);
           }
@@ -8420,6 +8425,25 @@ import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, wri
 import { homedir as homedir2 } from "node:os";
 import { join as join2 } from "node:path";
 import { MemoryStorage, PushNotificationService } from "@vultisig/sdk";
+var CLIENT_SIDE_TOOL_DISPATCH = {
+  sign_typed_data: "sign_typed_data",
+  add_coin: "add_coin",
+  remove_coin: "remove_coin",
+  add_chain: "add_chain",
+  remove_chain: "remove_chain",
+  address_book_add: "address_book_add",
+  address_book_remove: "address_book_remove"
+};
+var MAX_MESSAGE_LOOP_DEPTH = 16;
+function actionResultToRecentAction(r) {
+  if (r.success) {
+    return { tool: r.action, success: true, data: r.data ?? {} };
+  }
+  const data = { ...r.data ?? {} };
+  if (r.error) data.error = r.error;
+  if (r.code) data.code = r.code;
+  return { tool: r.action, success: false, data };
+}
 var AgentSession = class {
   client;
   vault;
@@ -8431,6 +8455,8 @@ var AgentSession = class {
   abortController = null;
   historyMessages = [];
   pushService = null;
+  // Flushed into context.recent_actions on the next outbound request.
+  pendingToolResults = [];
   constructor(vault, config) {
     this.vault = vault;
     this.config = config;
@@ -8552,17 +8578,10 @@ var AgentSession = class {
     } catch {
     }
     try {
-      await this.processMessageLoop(content, null, ui);
+      await this.processMessageLoop(content, ui);
     } catch (err) {
-      if (err.message?.includes("401") || err.message?.includes("403")) {
-        clearCachedToken(this.publicKey);
-        const auth = await authenticateVault(this.client, this.vault, this.config.password);
-        this.client.setAuthToken(auth.token);
-        saveCachedToken(this.publicKey, auth.token, auth.expiresAt);
-        await this.processMessageLoop(content, null, ui);
-      } else {
-        throw err;
-      }
+      this.pendingToolResults = [];
+      throw err;
     } finally {
       this.abortController = null;
     }
@@ -8571,11 +8590,20 @@ var AgentSession = class {
    * Core message processing loop.
    * Sends content or action results, executes returned actions, repeats.
    */
-  async processMessageLoop(content, actionResults, ui) {
+  async processMessageLoop(content, ui, depth = 0) {
     if (!this.conversationId) return;
+    if (depth > MAX_MESSAGE_LOOP_DEPTH) {
+      process.stderr.write(
+        `[session] processMessageLoop exceeded MAX_MESSAGE_LOOP_DEPTH (${MAX_MESSAGE_LOOP_DEPTH}); stopping. pendingToolResults=${this.pendingToolResults.length}
+`
+      );
+      this.pendingToolResults = [];
+      ui.onDone();
+      return;
+    }
     const request = {
       public_key: this.publicKey,
-      context: this.cachedContext
+      context: this.cachedContext ? { ...this.cachedContext } : {}
     };
     if (this.config.viaAgent || this.config.askMode) {
       request.via_agent = true;
@@ -8583,61 +8611,92 @@ var AgentSession = class {
     if (content) {
       request.content = content;
     }
-    if (actionResults && actionResults.length > 0) {
-      const result = actionResults[0];
-      request.action_result = {
-        action: result.action,
-        action_id: result.action_id,
-        success: result.success,
-        data: result.data || {},
-        error: result.error || "",
-        ...!result.success && result.code ? { code: result.code } : {}
-      };
+    let flushedThisCall = [];
+    if (this.pendingToolResults.length > 0) {
+      flushedThisCall = [...this.pendingToolResults];
+      request.context.recent_actions = this.pendingToolResults.splice(0);
+      if (this.config.verbose) {
+        process.stderr.write(`[session] flushed ${request.context.recent_actions.length} recent_actions into request
+`);
+      }
     }
     let serverTxStoredFromStream = 0;
-    const streamResult = await this.client.sendMessageStream(
-      this.conversationId,
-      request,
-      {
-        onTextDelta: (delta) => ui.onTextDelta(delta),
-        onToolProgress: (tool, status, label) => {
-          if (status === "running") {
-            ui.onToolCall(`mcp-${tool}`, tool);
-          } else {
-            ui.onToolResult(`mcp-${tool}`, tool, true, { label });
-          }
-        },
-        onTitle: (_title) => {
-        },
-        onActions: (_actions) => {
-        },
-        onSuggestions: (suggestions) => {
-          ui.onSuggestions(suggestions);
-        },
-        onTxReady: (tx) => {
-          if (this.executor.storeServerTransaction(tx)) {
-            serverTxStoredFromStream++;
-            if (this.config.password) {
-              this.executor.setPassword(this.config.password);
-            }
+    const pendingDispatches = [];
+    let dispatchChain = Promise.resolve();
+    const callbacks = {
+      onTextDelta: (delta) => ui.onTextDelta(delta),
+      onToolProgress: (tool, status, label) => {
+        if (status === "running") {
+          ui.onToolCall(`mcp-${tool}`, tool);
+        } else {
+          ui.onToolResult(`mcp-${tool}`, tool, true, { label });
+        }
+      },
+      onClientSideToolCall: (toolCallId, toolName, input) => {
+        const dispatch = dispatchChain.then(() => this.dispatchClientSideTool(toolCallId, toolName, input, ui));
+        dispatchChain = dispatch.catch(() => {
+        });
+        pendingDispatches.push(dispatch);
+      },
+      onTitle: (_title) => {
+      },
+      onActions: (_actions) => {
+      },
+      onSuggestions: (suggestions) => {
+        ui.onSuggestions(suggestions);
+      },
+      onTxReady: (tx) => {
+        if (this.executor.storeServerTransaction(tx)) {
+          serverTxStoredFromStream++;
+          if (this.config.password) {
+            this.executor.setPassword(this.config.password);
           }
-        },
-        onMessage: (_msg) => {
-        },
-        onError: (error2, code) => {
-          ui.onError(error2, code);
         }
       },
-      this.abortController?.signal
-    );
+      onMessage: (_msg) => {
+      },
+      onError: (error2, code) => {
+        ui.onError(error2, code);
+      }
+    };
+    let streamResult;
+    let authRetried = false;
+    while (true) {
+      try {
+        streamResult = await this.client.sendMessageStream(
+          this.conversationId,
+          request,
+          callbacks,
+          this.abortController?.signal
+        );
+        break;
+      } catch (err) {
+        const isAuthErr = err.message?.includes("401") || err.message?.includes("403");
+        if (isAuthErr && !authRetried) {
+          authRetried = true;
+          clearCachedToken(this.publicKey);
+          const auth = await authenticateVault(this.client, this.vault, this.config.password);
+          this.client.setAuthToken(auth.token);
+          saveCachedToken(this.publicKey, auth.token, auth.expiresAt);
+          continue;
+        }
+        if (flushedThisCall.length > 0) {
+          this.pendingToolResults = [...flushedThisCall, ...this.pendingToolResults];
+        }
+        throw err;
+      }
+    }
+    if (pendingDispatches.length > 0) {
+      await Promise.all(pendingDispatches);
+    }
     const responseText = streamResult.message?.content || streamResult.fullText || "";
     const displayText = stripLeakedToolCallTags(responseText);
     if (displayText) {
       ui.onAssistantMessage(displayText);
     }
-    const actions = streamResult.actions.filter((a) => a.type !== "sign_tx");
-    if (actions.length > 0) {
-      const results = await this.executeActions(actions, ui);
+    const legacyActions = streamResult.actions.filter((a) => a.type !== "sign_tx");
+    if (legacyActions.length > 0) {
+      const results = await this.executeActions(legacyActions, ui);
       const hasBuildSuccess = results.some((r) => r.success && r.action.startsWith("build_"));
       if (hasBuildSuccess && this.executor.hasPendingTransaction()) {
         if (this.config.verbose)
@@ -8653,14 +8712,16 @@ var AgentSession = class {
         const signResults = await this.executeActions([signAction], ui);
         const signResult = signResults[0];
         if (signResult) {
-          await this.processMessageLoop(null, [signResult], ui);
+          this.pendingToolResults.push(actionResultToRecentAction(signResult));
+          await this.processMessageLoop(null, ui, depth + 1);
           return;
         }
       }
       if (results.length > 0) {
         for (const result of results) {
-          await this.processMessageLoop(null, [result], ui);
+          this.pendingToolResults.push(actionResultToRecentAction(result));
         }
+        await this.processMessageLoop(null, ui, depth + 1);
         return;
       }
     }
@@ -8680,13 +8741,62 @@ var AgentSession = class {
       const results = await this.executeActions([signAction], ui);
       if (results.length > 0) {
         for (const result of results) {
-          await this.processMessageLoop(null, [result], ui);
+          this.pendingToolResults.push(actionResultToRecentAction(result));
         }
+        await this.processMessageLoop(null, ui, depth + 1);
         return;
       }
     }
+    if (this.pendingToolResults.length > 0) {
+      await this.processMessageLoop(null, ui, depth + 1);
+      return;
+    }
     ui.onDone();
   }
+  // Routes client-side tool calls through executeAction. Missing registry
+  // entries surface as a visible `[cli] unimplemented` warning + failure
+  // RecentAction (never silent).
+  async dispatchClientSideTool(toolCallId, toolName, input, ui) {
+    const actionType = CLIENT_SIDE_TOOL_DISPATCH[toolName];
+    if (!actionType) {
+      process.stderr.write(`[cli] unimplemented client-side tool: ${toolName}
+`);
+      this.pendingToolResults.push({
+        tool: toolName,
+        success: false,
+        data: { error: `unimplemented in CLI: ${toolName}` }
+      });
+      return;
+    }
+    const action = {
+      id: toolCallId,
+      type: actionType,
+      title: toolName,
+      params: input,
+      auto_execute: true
+    };
+    try {
+      const results = await this.executeActions([action], ui);
+      const result = results[0];
+      if (result) {
+        const recent = actionResultToRecentAction(result);
+        if (recent.data === void 0) recent.data = {};
+        for (const key of Object.keys(input)) {
+          if (key.startsWith("__") || key === "pm_order_ref") {
+            recent.data[key] = input[key];
+          }
+        }
+        this.pendingToolResults.push(recent);
+      }
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      this.pendingToolResults.push({
+        tool: toolName,
+        success: false,
+        data: { error: message }
+      });
+    }
+  }
   /**
    * Execute a list of actions, handling password requirements.
    */
@@ -9343,7 +9453,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "0.19.0";
+    cachedVersion = "0.21.0";
     return cachedVersion;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -73,10 +73,10 @@
     "@cosmjs/stargate": "^0.38.1",
     "@napi-rs/keyring": "^1.2.0",
     "@noble/hashes": "^2.0.1",
-    "@vultisig/client-shared": "^0.2.3",
+    "@vultisig/client-shared": "^0.2.5",
     "@vultisig/core-chain": "^1.4.1",
-    "@vultisig/rujira": "^14.0.0",
-    "@vultisig/sdk": "^0.19.0",
+    "@vultisig/rujira": "^16.0.0",
+    "@vultisig/sdk": "^0.21.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^14.0.3",