@vultisig/cli 2.16.0 → 2.18.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # @vultisig/cli
 
+## 2.18.0
+
+### Minor Changes
+
+- [#1004](https://github.com/vultisig/vultisig-sdk/pull/1004) [`42fe389`](https://github.com/vultisig/vultisig-sdk/commit/42fe3893196e7d8945f852695387828eb49bfb41) Thanks [@neavra](https://github.com/neavra)! - feat(cli): surface a typed turn-outcome for `agent ask` (success / blocked / refusal / error)
+
+  The CLI now advertises the `turn_outcome` surface and parses the backend's
+  `data-turn_outcome` SSE part, so a headless `agent ask` caller can tell four turn
+  endings apart WITHOUT parsing prose:
+
+  - **success** — the turn completed normally
+  - **blocked** — a fund-safety guardrail deliberately blocked the requested action
+  - **refusal** — the model refused or asked a clarifying question (no action taken)
+  - **error** — an infrastructure error ended the turn
+
+  Two additive surfaces:
+
+  - `agent ask --output json` gains a top-level `outcome` field
+    (`{ kind, code?, detail? }`) on both the success and error envelopes. Human
+    output prints a greppable `outcome:<kind>[:<code>]` line for non-success turns.
+  - New dedicated exit codes (additive; the 0–9 taxonomy is unchanged):
+    `10` = a fund-safety block, `11` = a refusal/clarifying question. A frame-less
+    infrastructure error now exits `1` instead of a false `0`. Success stays `0`.
+
+  Behavior change to note: a turn the backend BLOCKS or the model REFUSES previously
+  exited `0` (indistinguishable from success); it now exits `10`/`11`. Scripts that
+  treated every `agent ask` as success-on-0 should branch on `outcome.kind` (or the
+  exit code). Against an older backend that does not emit `data-turn_outcome`, the
+  `outcome` field is absent and exit codes are unchanged.
+
+### Patch Changes
+
+- Updated dependencies [[`31814c4`](https://github.com/vultisig/vultisig-sdk/commit/31814c4b452ef5b2628dc12bc46e427fcf0b7237), [`b37dc3c`](https://github.com/vultisig/vultisig-sdk/commit/b37dc3c31d6f93af982cd1e082e0b4d1382dc19d), [`01c5630`](https://github.com/vultisig/vultisig-sdk/commit/01c56303d0b872a76de07da9685331106f586c80)]:
+  - @vultisig/sdk@2.18.0
+  - @vultisig/rujira@51.0.0
+
+## 2.17.0
+
+### Patch Changes
+
+- Updated dependencies [[`2585dc1`](https://github.com/vultisig/vultisig-sdk/commit/2585dc1830dd7b28694edd411991b24c3fad1538), [`152bb4a`](https://github.com/vultisig/vultisig-sdk/commit/152bb4a2b717efa2f1edb14b7e19cdeba87450c7), [`4a58c6c`](https://github.com/vultisig/vultisig-sdk/commit/4a58c6c1294c88e5d937c3dde24e50edd3fdf2a0), [`ed46385`](https://github.com/vultisig/vultisig-sdk/commit/ed46385358883ed5277f8771ba73000afec9859e), [`72082a6`](https://github.com/vultisig/vultisig-sdk/commit/72082a65eab226cebf562863bcb99346b81ca831), [`a9266a1`](https://github.com/vultisig/vultisig-sdk/commit/a9266a1753ca474b3f337f8a605900acdd7508b0), [`2791af8`](https://github.com/vultisig/vultisig-sdk/commit/2791af8a1e539103678ba71b774d62d2e7691a29), [`b68ddad`](https://github.com/vultisig/vultisig-sdk/commit/b68ddadbc6295957cbb4b37c365a4062b0a2576f), [`ab5e413`](https://github.com/vultisig/vultisig-sdk/commit/ab5e413ead62da47dc144e591ac310d1d4328a56), [`90f6ae5`](https://github.com/vultisig/vultisig-sdk/commit/90f6ae5a1865321e08bf6f03c17e23ed11006649), [`7cfa332`](https://github.com/vultisig/vultisig-sdk/commit/7cfa332787f7646e049813a9f3b15613454f19d1), [`c60d7c6`](https://github.com/vultisig/vultisig-sdk/commit/c60d7c6ecdf46e46bf1098cc57342d5fb79d2194), [`99db752`](https://github.com/vultisig/vultisig-sdk/commit/99db752f093575f90b99b30674ec9be8af49fed9)]:
+  - @vultisig/sdk@2.17.0
+  - @vultisig/rujira@50.0.0
+
 ## 2.16.0
 
 ### Patch Changes

package/dist/index.js

@@ -5316,7 +5316,9 @@ var EXIT_CODE_DESCRIPTIONS = {
   [6 /* EXTERNAL_SERVICE */]: "External service error (retryable)",
   [7 /* UNKNOWN */]: "Unknown/unexpected error",
   [8 /* ACK_FAILED */]: "Broadcast succeeded but post-broadcast report failed \u2014 hash is valid, do NOT retry",
-  [9 /* DUPLICATE_BROADCAST */]: "Duplicate broadcast refused (nothing sent) \u2014 retry with --force to override"
+  [9 /* DUPLICATE_BROADCAST */]: "Duplicate broadcast refused (nothing sent) \u2014 retry with --force to override",
+  [10 /* AGENT_TURN_BLOCKED */]: "agent ask: a fund-safety guardrail blocked the requested action",
+  [11 /* AGENT_TURN_REFUSAL */]: "agent ask: the model refused or asked a clarifying question (no action taken)"
 };
 var VsigError = class extends Error {
   hint;
@@ -8249,6 +8251,7 @@ var AskInterface = class {
   toolCalls = [];
   transactions = [];
   cards = [];
+  outcome;
   error;
   // Initialize-time error, kept SEPARATE from the turn error so it stays the
   // LOWEST-priority signal. initialize() drives getCallbacks() BEFORE the first
@@ -8311,6 +8314,9 @@ var AskInterface = class {
       onBalanceSummary: (card) => {
         this.cards.push(card);
       },
+      onTurnOutcome: (outcome) => {
+        this.outcome = outcome;
+      },
       onSuggestions: (_suggestions) => {
       },
       onTxStatus: (txHash, chain, status, explorerUrl) => {
@@ -8363,6 +8369,7 @@ var AskInterface = class {
     this.toolCalls = [];
     this.transactions = [];
     this.cards = [];
+    this.outcome = void 0;
     this.error = void 0;
     if (this.hasAsked) {
       this.initError = void 0;
@@ -8390,7 +8397,8 @@ var AskInterface = class {
       cards: this.cards,
       // A real turn error wins; fall back to the init-time signal (e.g. stale
       // --session SESSION_NOT_FOUND) only when the turn produced no error.
-      error: this.error ?? this.initError
+      error: this.error ?? this.initError,
+      ...this.outcome ? { outcome: this.outcome } : {}
     };
   }
 };
@@ -8797,7 +8805,19 @@ function padTo32Bytes(buf) {
 
 // src/agent/cards.ts
 import chalk8 from "chalk";
-var CLI_SUPPORTED_SURFACES = ["balance_summary"];
+var CLI_SUPPORTED_SURFACES = ["balance_summary", "turn_outcome"];
+function parseTurnOutcome(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const kind = raw.kind;
+  if (kind !== "success" && kind !== "blocked" && kind !== "refusal" && kind !== "error") return null;
+  const code = raw.code;
+  const detail = raw.detail;
+  return {
+    kind,
+    ...typeof code === "string" ? { code } : {},
+    ...typeof detail === "string" ? { detail } : {}
+  };
+}
 function stripControlChars(s) {
   let out = "";
   for (const ch of s) {
@@ -12347,6 +12367,11 @@ var AgentClient = class {
           callbacks.onBalanceSummary?.(card);
           break;
         }
+        case "turn_outcome": {
+          const outcome = parseTurnOutcome(v1Data ?? parsed.data ?? parsed);
+          if (outcome) callbacks.onTurnOutcome?.(outcome);
+          break;
+        }
         case "message": {
           const msg = v1Data?.message ?? parsed.message ?? parsed;
           result.message = msg;
@@ -12448,6 +12473,8 @@ var AgentClient = class {
         return "tx_ready";
       case "data-balance_summary":
         return "balance_summary";
+      case "data-turn_outcome":
+        return "turn_outcome";
       case "data-message":
         return "message";
       case "error":
@@ -13288,6 +13315,9 @@ var AgentSession = class {
           ui.onBalanceSummary?.(card);
         }
       },
+      onTurnOutcome: (outcome) => {
+        ui.onTurnOutcome?.(outcome);
+      },
       onMessage: (_msg) => {
       },
       onError: (error2, code) => {
@@ -14280,6 +14310,7 @@ function outputAskError(wantsJson, message, code, conversationId, result) {
     if (result?.transactions.length) data.transactions = result.transactions;
     if (result?.toolCalls.length) data.tool_calls = result.toolCalls;
     if (result?.response) data.response = result.response;
+    if (result?.outcome) data.outcome = result.outcome;
     outputErrorJson({
       success: false,
       v: 1,
@@ -14294,6 +14325,11 @@ function outputAskError(wantsJson, message, code, conversationId, result) {
 function outputAskHuman(result, confirmationRequired, proposed) {
   process.stdout.write(`session:${result.sessionId}
 `);
+  if (result.outcome && result.outcome.kind !== "success") {
+    const { kind, code } = result.outcome;
+    process.stdout.write(`outcome:${kind}${code ? `:${code}` : ""}
+`);
+  }
   if (confirmationRequired) {
     process.stdout.write(`confirmation-required:pass --yes to authorize signing
 `);
@@ -14336,6 +14372,12 @@ function outputAskSuccess(wantsJson, result, conversationId) {
       tool_calls: result.toolCalls,
       transactions: result.transactions,
       ...result.cards.length > 0 ? { cards: result.cards } : {},
+      // a2a-02: the typed turn ending (success | blocked | refusal | error) at
+      // `data.outcome` — the same relative slot as on the error envelope. Present
+      // only against a backend that honored the advertised turn_outcome surface;
+      // headless callers should branch on this (and the exit code), not `success`
+      // (which stays true for a completed-but-blocked/refused turn).
+      ...result.outcome ? { outcome: result.outcome } : {},
       ...confirmationRequired ? { confirmation_required: true } : {},
       ...proposed ? { proposed } : {}
     });
@@ -14343,6 +14385,21 @@ function outputAskSuccess(wantsJson, result, conversationId) {
   }
   outputAskHuman(result, confirmationRequired, proposed);
 }
+function outcomeToExitCode(outcome) {
+  switch (outcome?.kind) {
+    case "blocked":
+      return 10 /* AGENT_TURN_BLOCKED */;
+    case "refusal":
+      return 11 /* AGENT_TURN_REFUSAL */;
+    case "error":
+      return 1 /* USAGE */;
+    // 1 — generic failure; a stream error-frame path sets a more specific code first
+    case "success":
+      return 0 /* SUCCESS */;
+    default:
+      return void 0;
+  }
+}
 async function executeAgentAsk(ctx2, message, options) {
   setSilentMode(true);
   const originalConsoleLog = console.log;
@@ -14376,6 +14433,7 @@ async function executeAgentAsk(ctx2, message, options) {
       exitCode = agentErrorCodeToExitCode(result.error.code);
       outputAskError(wantsJson, result.error.message, result.error.code, conversationId, result);
     } else {
+      exitCode = outcomeToExitCode(result.outcome) ?? 0;
       outputAskSuccess(wantsJson, result, conversationId);
     }
   } catch (err) {
@@ -14494,7 +14552,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.16.0";
+    cachedVersion = "2.18.0";
     return cachedVersion;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.16.0",
+  "version": "2.18.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -75,8 +75,8 @@
     "@noble/hashes": "^2.2.0",
     "@vultisig/client-shared": "^0.2.17",
     "@vultisig/core-chain": "^2.23.1",
-    "@vultisig/rujira": "^49.0.0",
-    "@vultisig/sdk": "^2.16.0",
+    "@vultisig/rujira": "^51.0.0",
+    "@vultisig/sdk": "^2.18.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",