@vultisig/cli 0.2.0-alpha.6 → 0.2.0-beta.8

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @vultisig/cli
 
+## 0.2.0-beta.8
+
+### Minor Changes
+
+- [#62](https://github.com/vultisig/vultisig-sdk/pull/62) [`008db7f`](https://github.com/vultisig/vultisig-sdk/commit/008db7fb27580ec78df3bbc41b25aac24924ffd8) Thanks [@bornslippynuxx](https://github.com/bornslippynuxx)! - feat: separate unlock and export passwords in CLI export command
+
+  The export command now has two distinct password options:
+  - `--password`: Unlocks the vault (decrypts stored keyshares for encrypted vaults)
+  - `--exportPassword`: Encrypts the exported file (defaults to `--password` if not specified)
+
+  This fixes the "Password required but callback returned empty value" error when exporting encrypted vaults.
+
+  Password resolution now uses an in-memory cache that persists across SDK callbacks, allowing the CLI to pre-cache the unlock password before vault loading.
+
+### Patch Changes
+
+- [#62](https://github.com/vultisig/vultisig-sdk/pull/62) [`008db7f`](https://github.com/vultisig/vultisig-sdk/commit/008db7fb27580ec78df3bbc41b25aac24924ffd8) Thanks [@bornslippynuxx](https://github.com/bornslippynuxx)! - Simplify export command by removing `--encrypt` and `--no-encrypt` flags. Password is now optional - if provided, vault is encrypted; if omitted or empty, vault is exported without encryption. Path argument now supports directories (appends SDK-generated filename).
+
+- Updated dependencies [[`008db7f`](https://github.com/vultisig/vultisig-sdk/commit/008db7fb27580ec78df3bbc41b25aac24924ffd8)]:
+  - @vultisig/sdk@0.2.0-beta.8
+
+## 0.2.0-alpha.7
+
+### Minor Changes
+
+- [#60](https://github.com/vultisig/vultisig-sdk/pull/60) [`b4cf357`](https://github.com/vultisig/vultisig-sdk/commit/b4cf357c98ef493b48c807e5bb45cd40b9893295) Thanks [@bornslippynuxx](https://github.com/bornslippynuxx)! - feat: Add SecureVault support for multi-device MPC vaults
+  - Implement SecureVault.create() for multi-device keygen ceremony
+  - Add RelaySigningService for coordinated signing via relay server
+  - Implement SecureVault.sign() and signBytes() methods
+  - Add QR code generation for mobile app pairing (compatible with Vultisig iOS/Android)
+  - CLI: Add `vault create --type secure` with terminal QR display
+  - CLI: Support secure vault signing with device coordination
+  - Add comprehensive unit, integration, and E2E tests
+
+### Patch Changes
+
+- Updated dependencies [[`b4cf357`](https://github.com/vultisig/vultisig-sdk/commit/b4cf357c98ef493b48c807e5bb45cd40b9893295)]:
+  - @vultisig/sdk@0.2.0-alpha.7
+
 ## 0.2.0-alpha.6
 
 ### Patch Changes

package/README.md

@@ -53,7 +53,7 @@ vultisig completion fish >> ~/.config/fish/completions/vultisig.fish
 
 ## Quick Start
 
-### Create a Vault
+### Create a Fast Vault
 
 ```bash
 vultisig create
@@ -65,6 +65,46 @@ You'll be prompted to:
 3. Provide an email for verification
 4. Enter the verification code sent to your email
 
+### Create a Secure Vault (Multi-Device)
+
+```bash
+vultisig create --secure --name "Team Wallet" --shares 3
+```
+
+This creates a secure vault with configurable N-of-M threshold:
+1. A QR code displays in your terminal
+2. Other participants scan with Vultisig mobile app (iOS/Android)
+3. Once all devices join, keygen runs automatically
+4. Vault is created and ready to use
+
+**Secure vault options:**
+- `--shares <n>` - Number of participating devices (default: 2)
+- `--threshold <n>` - Signing threshold (default: ceil((shares+1)/2))
+
+**Example session:**
+```bash
+$ vultisig create --secure --name "Team Wallet" --shares 3
+
+Creating secure vault: Team Wallet (2-of-3)
+
+Scan this QR code with Vultisig mobile app:
+████████████████████████████
+█ ▄▄▄▄▄ █▀ ▄█▄█▀█ ▄▄▄▄▄ █
+█ █   █ █▀▄▄▄ ▄██ █   █ █
+...
+
+Waiting for devices to join...
+⠋ Device joined: iPhone-abc123 (2/3)
+⠋ Device joined: Android-def456 (3/3)
+
+All devices joined. Running keygen...
+✓ ECDSA keygen complete
+✓ EdDSA keygen complete
+
+✓ Secure vault created: Team Wallet
+  Vault ID: vault_abc123def456
+```
+
 ### Check Balances
 
 ```bash
@@ -91,6 +131,29 @@ vultisig send ethereum 0xRecipient... 100 --token 0xTokenAddress...
 vultisig send ethereum 0xRecipient... 0.1 --password mypassword
 ```
 
+**Secure vault transactions:**
+
+When using a secure vault, a QR code displays for device coordination:
+
+```bash
+$ vultisig send ethereum 0x742d35Cc... 0.1
+
+Preparing transaction...
+
+Scan this QR code to approve transaction:
+████████████████████████████
+...
+
+Waiting for devices to join signing session...
+⠋ Device joined: iPhone-abc123 (2/2)
+
+Signing transaction...
+✓ Transaction signed
+✓ Broadcast: 0x9f8e7d6c...
+```
+
+You can cancel with Ctrl+C while waiting for devices.
+
 ### Interactive Shell
 
 Start an interactive session with tab completion and password caching:
@@ -107,7 +170,8 @@ vultisig -i
 
 | Command | Description |
 |---------|-------------|
-| `create` | Create a new vault |
+| `create` | Create a new fast vault (server-assisted) |
+| `create --secure` | Create a secure vault (multi-device MPC) |
 | `import <file>` | Import vault from .vult file |
 | `export [path]` | Export vault to file |
 | `verify <vaultId>` | Verify vault with email code |
@@ -116,6 +180,35 @@ vultisig -i
 | `rename <newName>` | Rename the active vault |
 | `info` | Show detailed vault information |
 
+**Create options:**
+- `--secure` - Create a secure vault instead of fast vault
+- `--name <name>` - Vault name
+- `--shares <n>` - Number of devices for secure vault (default: 2)
+- `--threshold <n>` - Signing threshold (default: ceil((shares+1)/2))
+
+**Export options:**
+- `[path]` - Output file or directory (defaults to SDK-generated filename in current directory)
+- `--password <password>` - Password to unlock encrypted vaults
+- `--exportPassword <password>` - Password to encrypt the export file (defaults to `--password` if provided)
+
+```bash
+# Export to current directory (prompts for export password)
+vultisig export
+
+# Export to specific directory
+vultisig export /path/to/backups/
+
+# Export with encryption (same password for unlock and export)
+vultisig export --password mypassword
+
+# Export with different passwords for unlock vs export
+vultisig export --password unlockPass --exportPassword exportPass
+
+# Export without encryption (leave password prompt empty)
+vultisig export
+# > Enter password for export encryption (leave empty for no encryption): [enter]
+```
+
 ### Wallet Operations
 
 | Command | Description |