@vultisig/cli 2.18.7 → 2.19.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/CHANGELOG.md +30 -0
  2. package/dist/index.js +2632 -2546
  3. package/package.json +4 -4
package/CHANGELOG.md CHANGED
@@ -1,5 +1,35 @@
1
1
  # @vultisig/cli
2
2
 
3
+ ## 2.19.7
4
+
5
+ ### Patch Changes
6
+
7
+ - [#1027](https://github.com/vultisig/vultisig-sdk/pull/1027) [`47908cf`](https://github.com/vultisig/vultisig-sdk/commit/47908cfff78942be6220438f08ab08c61178f282) Thanks [@neavra](https://github.com/neavra)! - Wire the broadcast-journal double-spend guard into the direct `send` and `swap`
8
+ commands. Previously only the `agent ask` path consulted the persistent journal,
9
+ so a retried `send`/`swap` re-broadcast an identical intent (audit P5-1, HIGH —
10
+ double-spend). Both paths now share ONE journal: an identical send/swap within
11
+ the dedupe window is refused (exit code 9) instead of broadcasting a second time,
12
+ and `send`/`swap` gain a `--force` flag to override the guard.
13
+
14
+ `--max` sends/swaps fingerprint a stable sentinel (not the drift-prone resolved
15
+ amount) so a `--max` retry can't slip past the guard when the fee/balance moves.
16
+ The journal is namespaced by the vault's ECDSA key (falling back to the vault id),
17
+ so a native/EVM `send` and an identical `agent ask` cross-dedupe against the one
18
+ journal; ERC-20-token cross-path and swap cross-path dedup are out of scope (a
19
+ missed dedup, never a double-spend).
20
+
21
+ - Updated dependencies [[`b1f2887`](https://github.com/vultisig/vultisig-sdk/commit/b1f288758ba627061c9c26085f96a3541b131163), [`f54d53a`](https://github.com/vultisig/vultisig-sdk/commit/f54d53a0252d133c2d2d6b37c649542cb4069fd3)]:
22
+ - @vultisig/sdk@2.19.7
23
+
24
+ ## 2.19.0
25
+
26
+ ### Patch Changes
27
+
28
+ - Updated dependencies [[`ad6196b`](https://github.com/vultisig/vultisig-sdk/commit/ad6196b32ae879e7b0e0fda48e462fc7a05eb1de)]:
29
+ - @vultisig/core-chain@2.24.0
30
+ - @vultisig/sdk@2.19.0
31
+ - @vultisig/rujira@52.0.0
32
+
3
33
  ## 2.18.7
4
34
 
5
35
  ### Patch Changes