@vultisig/cli 2.19.7 → 2.19.10

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # @vultisig/cli
 
+## 2.19.10
+
+### Patch Changes
+
+- [#1076](https://github.com/vultisig/vultisig-sdk/pull/1076) [`5179edd`](https://github.com/vultisig/vultisig-sdk/commit/5179edd9eb25b392941f9649a455e92bfd5bf8b5) Thanks [@neavra](https://github.com/neavra)! - fix(chains): validate `chains --add <chain>` against the registry before persisting
+
+  An invalid `chains --add fakechain` correctly reported INVALID_CHAIN but still wrote
+  "fakechain" to the vault's chain list (chain resolution falls back to the raw user
+  string when the name doesn't match the registry). Every subsequent address-deriving
+  command then re-derived the bogus chain and dumped a stack trace to stderr until it was
+  manually removed. The `--add` path now validates against the supported-chain registry
+  first and fails closed — nothing is persisted for an unsupported chain.
+
+- [#1127](https://github.com/vultisig/vultisig-sdk/pull/1127) [`dea1efa`](https://github.com/vultisig/vultisig-sdk/commit/dea1efae6fbd2975de4ac5a26b2e8210999a0f4f) Thanks [@neavra](https://github.com/neavra)! - fix(cli): honor VULTISIG_CONFIG_DIR for vault storage
+
+  The documented `VULTISIG_CONFIG_DIR` env var was a no-op for vault storage: the
+  CLI constructed the SDK without a storage override, so vaults, the active-vault
+  pointer and cache always resolved to `~/.vultisig` even when the var pointed
+  elsewhere — only `config.json` and the agent journal honored it, producing a
+  split-brain config location that broke CI/container isolation and multi-tenant
+  use. The CLI now roots SDK vault storage at `getConfigDir()` via a shared
+  `createVaultStorage()` helper. When the var is unset it falls back to
+  `~/.vultisig`, so the default location is unchanged.
+
+- [#1126](https://github.com/vultisig/vultisig-sdk/pull/1126) [`6054ff5`](https://github.com/vultisig/vultisig-sdk/commit/6054ff599e4133c9853f31e8ca2413ab52f606fb) Thanks [@neavra](https://github.com/neavra)! - fix(mpc): keep keygen tracing off stdout so `-o json` output stays parseable
+
+  The DKLS and Schnorr keygen/reshare/key-import ceremonies logged progress
+  (session ids, raw wire messages, "keygen complete", …) to stdout via ungated
+  `console.log`. stdout is the machine channel for the CLI's `-o json` mode, so
+  the documented `create fast … -o json` agent flow produced unparseable stdout
+  (`JSON.parse(stdout)` failed on the leading garbage) and leaked MPC internals
+  into terminals and CI logs.
+
+  Route that tracing through a gated logger that writes to stderr only when
+  `VULTISIG_DEBUG=1`, so stdout carries only the final JSON envelope while
+  the debug output stays available to humans on demand. No keygen behavior
+  changes — only the log sink moves off stdout.
+
+- [#1077](https://github.com/vultisig/vultisig-sdk/pull/1077) [`5e5494c`](https://github.com/vultisig/vultisig-sdk/commit/5e5494cf103ea5c17431b6a6231b30931eb004bb) Thanks [@neavra](https://github.com/neavra)! - Tolerate a corrupt `activeVaultId.json` at startup. A truncated or unparseable
+  active-vault pointer used to throw during CLI initialization, which broke every
+  command — including `vultisig vaults`, the one you run to recover. The pointer
+  read now fails open (treated as "no active vault") and self-heals by clearing
+  the bad pointer, so vaults still list with none marked active.
+- Updated dependencies [[`280956f`](https://github.com/vultisig/vultisig-sdk/commit/280956f1743564ea271a03c4735f70151b63f161), [`90070f3`](https://github.com/vultisig/vultisig-sdk/commit/90070f39be011821f7508c7ff094025861dce040), [`0e3f86d`](https://github.com/vultisig/vultisig-sdk/commit/0e3f86db82ed086b1e200a6f83434a638f593c17), [`6054ff5`](https://github.com/vultisig/vultisig-sdk/commit/6054ff599e4133c9853f31e8ca2413ab52f606fb), [`b37e726`](https://github.com/vultisig/vultisig-sdk/commit/b37e7264db3291adca1cb366f1311446d6add439), [`1b2636b`](https://github.com/vultisig/vultisig-sdk/commit/1b2636b535736a711fc537a87d2f51090fe6342d), [`2c9d34e`](https://github.com/vultisig/vultisig-sdk/commit/2c9d34e0837f68d92769c7aefa566ffb1c0c52c7), [`ffc75a6`](https://github.com/vultisig/vultisig-sdk/commit/ffc75a6e76af699a78b0fc3411ab052ce5000c91), [`fc595a1`](https://github.com/vultisig/vultisig-sdk/commit/fc595a17cb4901af1dfeac2521b93bb75823068f), [`776c539`](https://github.com/vultisig/vultisig-sdk/commit/776c5398764314f140f18ab4f86a1801fe9fdfe6)]:
+  - @vultisig/sdk@2.19.10
+  - @vultisig/core-chain@2.24.2
+
 ## 2.19.7
 
 ### Patch Changes

package/dist/index.js

@@ -5899,234 +5899,33 @@ async function executePortfolio(ctx2, options = {}) {
 // src/commands/chains.ts
 import { SUPPORTED_CHAINS } from "@vultisig/sdk";
 import chalk3 from "chalk";
-async function executeChains(ctx2, options = {}) {
-  const vault = await ctx2.ensureActiveVault();
-  if (options.addAll) {
-    const currentCount = vault.chains.length;
-    const spinner = createSpinner(`Adding all ${SUPPORTED_CHAINS.length} supported chains...`);
-    await vault.setChains([...SUPPORTED_CHAINS]);
-    const addedCount = SUPPORTED_CHAINS.length - currentCount;
-    spinner.succeed(`Added ${addedCount} chains (${SUPPORTED_CHAINS.length} total)`);
-    if (isJsonOutput()) {
-      outputJson({ chains: [...vault.chains], added: addedCount, total: SUPPORTED_CHAINS.length });
-      return;
-    }
-    info(chalk3.gray("\nAll supported chains are now enabled."));
-    return;
-  }
-  if (options.add) {
-    const alreadyActive = vault.chains.includes(options.add);
-    if (!alreadyActive) {
-      await vault.addChain(options.add);
-    }
-    const address = await vault.address(options.add);
-    if (isJsonOutput()) {
-      outputJson({ chain: options.add, alreadyActive, address, chains: [...vault.chains] });
-      return;
-    }
-    success(alreadyActive ? `
-Chain already active: ${options.add}` : `
-+ Added chain: ${options.add}`);
-    info(`Address: ${address}`);
-  } else if (options.remove) {
-    await vault.removeChain(options.remove);
-    if (isJsonOutput()) {
-      outputJson({ chain: options.remove, removed: true, chains: [...vault.chains] });
-      return;
-    }
-    success(`
-+ Removed chain: ${options.remove}`);
-  } else {
-    const chains = vault.chains;
-    if (isJsonOutput()) {
-      outputJson({ chains: [...chains] });
-      return;
-    }
-    printResult(chalk3.cyan("\nActive Chains:\n"));
-    chains.forEach((chain) => {
-      printResult(`  - ${chain}`);
-    });
-    info(chalk3.gray(`
-${chains.length} of ${SUPPORTED_CHAINS.length} chains enabled`));
-    info(chalk3.gray("Use --add <chain>, --add-all, or --remove <chain>"));
-  }
-}
-async function executeAddresses(ctx2) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner("Loading addresses...");
-  const addresses = await vault.addresses();
-  spinner.succeed("Addresses loaded");
-  if (isJsonOutput()) {
-    outputJson({ addresses });
-    return;
-  }
-  displayAddresses(addresses);
-}
 
-// src/commands/tokens.ts
-import chalk4 from "chalk";
-import inquirer3 from "inquirer";
-async function executeTokens(ctx2, options) {
-  await ctx2.ensureActiveVault();
-  if (options.discover) {
-    await discoverTokens(ctx2, options.chain);
-    return;
-  }
-  if (options.add) {
-    let symbol = options.symbol;
-    let name = options.name;
-    let decimals = options.decimals;
-    const prompts = [];
-    if (!symbol) {
-      prompts.push({
-        type: "input",
-        name: "symbol",
-        message: "Enter token symbol (e.g., USDT):",
-        validate: (input) => input.trim() !== "" || "Symbol is required"
-      });
-    }
-    if (!name) {
-      prompts.push({
-        type: "input",
-        name: "name",
-        message: "Enter token name (e.g., Tether USD):",
-        validate: (input) => input.trim() !== "" || "Name is required"
-      });
-    }
-    if (decimals === void 0) {
-      prompts.push({
-        type: "number",
-        name: "decimals",
-        message: "Enter token decimals:",
-        default: 18,
-        validate: (input) => input >= 0 || "Decimals must be non-negative"
-      });
-    }
-    if (prompts.length > 0) {
-      requireInteractive("Provide --symbol, --name, and --decimals flags for non-interactive token addition.");
-      const answers = await inquirer3.prompt(prompts);
-      symbol = symbol || answers.symbol?.trim();
-      name = name || answers.name?.trim();
-      decimals = decimals ?? answers.decimals;
-    }
-    await addToken(ctx2, {
-      chain: options.chain,
-      contractAddress: options.add,
-      symbol,
-      name,
-      decimals
-    });
-  } else if (options.remove) {
-    await removeToken(ctx2, options.chain, options.remove);
-  } else {
-    await listTokens(ctx2, options.chain);
-  }
-}
-async function addToken(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  await vault.addToken(options.chain, {
-    id: `${options.chain}-${options.contractAddress}`,
-    contractAddress: options.contractAddress,
-    symbol: options.symbol,
-    name: options.name,
-    decimals: options.decimals,
-    chainId: options.chain,
-    isNative: false
-  });
-  success(`
-+ Added token ${options.symbol} on ${options.chain}`);
-}
-async function removeToken(ctx2, chain, tokenId) {
-  const vault = await ctx2.ensureActiveVault();
-  await vault.removeToken(chain, tokenId);
-  success(`
-+ Removed token ${tokenId} from ${chain}`);
-}
-async function discoverTokens(ctx2, chain) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner(`Discovering tokens on ${chain}...`);
-  let discovered;
+// src/core/active-vault.ts
+var ACTIVE_VAULT_ID_KEY = "activeVaultId";
+async function loadActiveVaultSafely(sdk) {
+  let activeId;
   try {
-    discovered = await vault.discoverTokens(chain);
+    activeId = await sdk.storage.get(ACTIVE_VAULT_ID_KEY);
   } catch (err) {
-    spinner.fail(`Token discovery failed for ${chain}`);
-    throw err;
-  }
-  if (discovered.length === 0) {
-    spinner.succeed(`No new tokens found on ${chain}`);
-    if (isJsonOutput()) {
-      outputJson({ chain, discovered: [], count: 0 });
+    process.stderr.write(
+      `Warning: active vault pointer is unreadable and was ignored (no active vault). ${err?.message ?? ""}
+`
+    );
+    try {
+      await sdk.setActiveVault(null);
+    } catch {
     }
-    return;
-  }
-  const existingTokens = vault.getTokens(chain);
-  const existingAddresses = new Set(existingTokens.map((t) => t.contractAddress ?? t.id));
-  const newTokens = discovered.filter((d) => d.contractAddress && !existingAddresses.has(d.contractAddress));
-  for (const d of newTokens) {
-    await vault.addToken(chain, {
-      id: d.contractAddress,
-      symbol: d.ticker,
-      name: d.ticker,
-      decimals: d.decimals,
-      contractAddress: d.contractAddress,
-      chainId: chain,
-      isNative: false
-    });
+    return { vault: null, corruptPointer: true };
   }
-  const allTokens = vault.getTokens(chain);
-  spinner.succeed(`Discovered ${newTokens.length} new token(s) on ${chain}`);
-  if (isJsonOutput()) {
-    outputJson({
-      chain,
-      discovered: newTokens.map((d) => ({
-        symbol: d.ticker,
-        contractAddress: d.contractAddress,
-        decimals: d.decimals
-      })),
-      count: newTokens.length
-    });
-    return;
+  if (activeId === null || activeId === void 0) {
+    return { vault: null, corruptPointer: false };
   }
-  for (const d of newTokens) {
-    printResult(`  ${d.ticker} (${d.contractAddress})`);
-  }
-  info(chalk4.gray(`
-${allTokens.length} total token(s) tracked on ${chain}`));
+  return { vault: await sdk.getVaultById(activeId), corruptPointer: false };
 }
-async function listTokens(ctx2, chain) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner(`Loading tokens for ${chain}...`);
-  const tokens = vault.getTokens(chain);
-  spinner.succeed(`Tokens loaded for ${chain}`);
-  if (isJsonOutput()) {
-    outputJson({ chain, tokens: tokens || [] });
-    return;
-  }
-  if (!tokens || tokens.length === 0) {
-    warn(`
-No tokens configured for ${chain}`);
-    info(chalk4.gray(`
-Use --add <contractAddress> to add a token`));
-  } else {
-    printResult(chalk4.cyan(`
-Tokens for ${chain}:
-`));
-    const table = tokens.map((token) => ({
-      Symbol: token.symbol,
-      Name: token.name,
-      Contract: token.contractAddress || "N/A",
-      Decimals: token.decimals,
-      Native: token.isNative ? "Yes" : "No"
-    }));
-    printTable(table);
-    info(chalk4.gray(`
-Use --add <contractAddress> to add or --remove <tokenId> to remove`));
-  }
+function shouldAutoSelectActiveVault(hasActiveVault, corruptPointer, vaultCount) {
+  return !hasActiveVault && !corruptPointer && vaultCount > 0;
 }
 
-// src/commands/transaction.ts
-import { Chain, Vultisig as Vultisig2 } from "@vultisig/sdk";
-
 // src/agent/broadcastJournal.ts
 import { createHash } from "node:crypto";
 import {
@@ -6703,7 +6502,242 @@ import { getConfigPath, loadConfig, saveConfig } from "@vultisig/client-shared";
 // src/core/vault-discovery.ts
 import { discoverVaultFiles, SEARCH_DIRS } from "@vultisig/client-shared";
 
+// src/commands/chains.ts
+async function executeChains(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  if (options.addAll) {
+    const currentCount = vault.chains.length;
+    const spinner = createSpinner(`Adding all ${SUPPORTED_CHAINS.length} supported chains...`);
+    await vault.setChains([...SUPPORTED_CHAINS]);
+    const addedCount = SUPPORTED_CHAINS.length - currentCount;
+    spinner.succeed(`Added ${addedCount} chains (${SUPPORTED_CHAINS.length} total)`);
+    if (isJsonOutput()) {
+      outputJson({ chains: [...vault.chains], added: addedCount, total: SUPPORTED_CHAINS.length });
+      return;
+    }
+    info(chalk3.gray("\nAll supported chains are now enabled."));
+    return;
+  }
+  if (options.add) {
+    if (!SUPPORTED_CHAINS.includes(options.add)) {
+      throw new InvalidChainError(
+        `Unsupported chain: "${options.add}"`,
+        'Run "vultisig chains" to see the supported chains, or check the spelling.',
+        void 0,
+        { chain: String(options.add) }
+      );
+    }
+    const alreadyActive = vault.chains.includes(options.add);
+    if (!alreadyActive) {
+      await vault.addChain(options.add);
+    }
+    const address = await vault.address(options.add);
+    if (isJsonOutput()) {
+      outputJson({ chain: options.add, alreadyActive, address, chains: [...vault.chains] });
+      return;
+    }
+    success(alreadyActive ? `
+Chain already active: ${options.add}` : `
++ Added chain: ${options.add}`);
+    info(`Address: ${address}`);
+  } else if (options.remove) {
+    await vault.removeChain(options.remove);
+    if (isJsonOutput()) {
+      outputJson({ chain: options.remove, removed: true, chains: [...vault.chains] });
+      return;
+    }
+    success(`
++ Removed chain: ${options.remove}`);
+  } else {
+    const chains = vault.chains;
+    if (isJsonOutput()) {
+      outputJson({ chains: [...chains] });
+      return;
+    }
+    printResult(chalk3.cyan("\nActive Chains:\n"));
+    chains.forEach((chain) => {
+      printResult(`  - ${chain}`);
+    });
+    info(chalk3.gray(`
+${chains.length} of ${SUPPORTED_CHAINS.length} chains enabled`));
+    info(chalk3.gray("Use --add <chain>, --add-all, or --remove <chain>"));
+  }
+}
+async function executeAddresses(ctx2) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner("Loading addresses...");
+  const addresses = await vault.addresses();
+  spinner.succeed("Addresses loaded");
+  if (isJsonOutput()) {
+    outputJson({ addresses });
+    return;
+  }
+  displayAddresses(addresses);
+}
+
+// src/commands/tokens.ts
+import chalk4 from "chalk";
+import inquirer3 from "inquirer";
+async function executeTokens(ctx2, options) {
+  await ctx2.ensureActiveVault();
+  if (options.discover) {
+    await discoverTokens(ctx2, options.chain);
+    return;
+  }
+  if (options.add) {
+    let symbol = options.symbol;
+    let name = options.name;
+    let decimals = options.decimals;
+    const prompts = [];
+    if (!symbol) {
+      prompts.push({
+        type: "input",
+        name: "symbol",
+        message: "Enter token symbol (e.g., USDT):",
+        validate: (input) => input.trim() !== "" || "Symbol is required"
+      });
+    }
+    if (!name) {
+      prompts.push({
+        type: "input",
+        name: "name",
+        message: "Enter token name (e.g., Tether USD):",
+        validate: (input) => input.trim() !== "" || "Name is required"
+      });
+    }
+    if (decimals === void 0) {
+      prompts.push({
+        type: "number",
+        name: "decimals",
+        message: "Enter token decimals:",
+        default: 18,
+        validate: (input) => input >= 0 || "Decimals must be non-negative"
+      });
+    }
+    if (prompts.length > 0) {
+      requireInteractive("Provide --symbol, --name, and --decimals flags for non-interactive token addition.");
+      const answers = await inquirer3.prompt(prompts);
+      symbol = symbol || answers.symbol?.trim();
+      name = name || answers.name?.trim();
+      decimals = decimals ?? answers.decimals;
+    }
+    await addToken(ctx2, {
+      chain: options.chain,
+      contractAddress: options.add,
+      symbol,
+      name,
+      decimals
+    });
+  } else if (options.remove) {
+    await removeToken(ctx2, options.chain, options.remove);
+  } else {
+    await listTokens(ctx2, options.chain);
+  }
+}
+async function addToken(ctx2, options) {
+  const vault = await ctx2.ensureActiveVault();
+  await vault.addToken(options.chain, {
+    id: `${options.chain}-${options.contractAddress}`,
+    contractAddress: options.contractAddress,
+    symbol: options.symbol,
+    name: options.name,
+    decimals: options.decimals,
+    chainId: options.chain,
+    isNative: false
+  });
+  success(`
++ Added token ${options.symbol} on ${options.chain}`);
+}
+async function removeToken(ctx2, chain, tokenId) {
+  const vault = await ctx2.ensureActiveVault();
+  await vault.removeToken(chain, tokenId);
+  success(`
++ Removed token ${tokenId} from ${chain}`);
+}
+async function discoverTokens(ctx2, chain) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner(`Discovering tokens on ${chain}...`);
+  let discovered;
+  try {
+    discovered = await vault.discoverTokens(chain);
+  } catch (err) {
+    spinner.fail(`Token discovery failed for ${chain}`);
+    throw err;
+  }
+  if (discovered.length === 0) {
+    spinner.succeed(`No new tokens found on ${chain}`);
+    if (isJsonOutput()) {
+      outputJson({ chain, discovered: [], count: 0 });
+    }
+    return;
+  }
+  const existingTokens = vault.getTokens(chain);
+  const existingAddresses = new Set(existingTokens.map((t) => t.contractAddress ?? t.id));
+  const newTokens = discovered.filter((d) => d.contractAddress && !existingAddresses.has(d.contractAddress));
+  for (const d of newTokens) {
+    await vault.addToken(chain, {
+      id: d.contractAddress,
+      symbol: d.ticker,
+      name: d.ticker,
+      decimals: d.decimals,
+      contractAddress: d.contractAddress,
+      chainId: chain,
+      isNative: false
+    });
+  }
+  const allTokens = vault.getTokens(chain);
+  spinner.succeed(`Discovered ${newTokens.length} new token(s) on ${chain}`);
+  if (isJsonOutput()) {
+    outputJson({
+      chain,
+      discovered: newTokens.map((d) => ({
+        symbol: d.ticker,
+        contractAddress: d.contractAddress,
+        decimals: d.decimals
+      })),
+      count: newTokens.length
+    });
+    return;
+  }
+  for (const d of newTokens) {
+    printResult(`  ${d.ticker} (${d.contractAddress})`);
+  }
+  info(chalk4.gray(`
+${allTokens.length} total token(s) tracked on ${chain}`));
+}
+async function listTokens(ctx2, chain) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner(`Loading tokens for ${chain}...`);
+  const tokens = vault.getTokens(chain);
+  spinner.succeed(`Tokens loaded for ${chain}`);
+  if (isJsonOutput()) {
+    outputJson({ chain, tokens: tokens || [] });
+    return;
+  }
+  if (!tokens || tokens.length === 0) {
+    warn(`
+No tokens configured for ${chain}`);
+    info(chalk4.gray(`
+Use --add <contractAddress> to add a token`));
+  } else {
+    printResult(chalk4.cyan(`
+Tokens for ${chain}:
+`));
+    const table = tokens.map((token) => ({
+      Symbol: token.symbol,
+      Name: token.name,
+      Contract: token.contractAddress || "N/A",
+      Decimals: token.decimals,
+      Native: token.isNative ? "Yes" : "No"
+    }));
+    printTable(table);
+    info(chalk4.gray(`
+Use --add <contractAddress> to add or --remove <tokenId> to remove`));
+  }
+}
+
 // src/commands/transaction.ts
+import { Chain, Vultisig as Vultisig2 } from "@vultisig/sdk";
 async function executeSend(ctx2, params) {
   const vault = await ctx2.ensureActiveVault();
   if (!Object.values(Chain).includes(params.chain)) {
@@ -14534,7 +14568,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.19.7";
+    cachedVersion = "2.19.10";
     return cachedVersion;
   }
   try {
@@ -16150,7 +16184,7 @@ Error: ${error2.message}`));
   async loadAllVaults() {
     const spinner = createSpinner2("Loading vaults...").start();
     try {
-      const activeVault = await this.ctx.sdk.getActiveVault();
+      const { vault: activeVault, corruptPointer } = await loadActiveVaultSafely(this.ctx.sdk);
       if (activeVault) {
         this.ctx.addVault(activeVault);
         await this.ctx.setActiveVault(activeVault);
@@ -16164,7 +16198,7 @@ Error: ${error2.message}`));
             this.eventBuffer.setupVaultListeners(vault);
           }
         });
-        if (!this.ctx.getActiveVault() && this.ctx.getVaults().size > 0) {
+        if (shouldAutoSelectActiveVault(!!this.ctx.getActiveVault(), corruptPointer, this.ctx.getVaults().size)) {
           const firstVault = this.ctx.getVaults().values().next().value;
           await this.ctx.setActiveVault(firstVault);
         }
@@ -16174,6 +16208,11 @@ Error: ${error2.message}`));
       } else {
         spinner.succeed("No vaults found");
       }
+      if (corruptPointer && !this.ctx.getActiveVault() && this.ctx.getVaults().size > 0) {
+        console.log(
+          chalk14.yellow('Active vault pointer was corrupt and has been reset. Use "vault <name>" to pick one.')
+        );
+      }
     } catch (error2) {
       if (this.ctx.getVaults().size > 0) {
         spinner.succeed(`Loaded ${this.ctx.getVaults().size} vault(s)`);
@@ -16522,6 +16561,18 @@ complete -c vsig -n "__fish_seen_subcommand_from import export" -a "(__fish_comp
 `.trim();
 }
 
+// src/lib/config.ts
+import { FileStorage } from "@vultisig/sdk/node";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
+function getConfigDir() {
+  const override = process.env.VULTISIG_CONFIG_DIR?.trim();
+  return override ? override : join6(homedir6(), ".vultisig");
+}
+function createVaultStorage() {
+  return new FileStorage({ basePath: getConfigDir() });
+}
+
 // src/lib/errors.ts
 import chalk15 from "chalk";
 
@@ -16596,6 +16647,7 @@ async function init(vaultOverride, unlockPassword, passwordTTL) {
     const globalOptions = program.opts();
     const serverEndpoints = resolveServerEndpoints(globalOptions);
     const sdk = new Vultisig6({
+      storage: createVaultStorage(),
       onPasswordRequired: createPasswordCallback(),
       ...serverEndpoints ? { serverEndpoints } : {},
       ...passwordTTL !== void 0 ? { passwordCache: { defaultTTL: passwordTTL } } : {}
@@ -16609,7 +16661,7 @@ async function init(vaultOverride, unlockPassword, passwordTTL) {
         throw new Error(`Vault not found: "${vaultSelector}"`);
       }
     } else {
-      vault = await sdk.getActiveVault();
+      vault = (await loadActiveVaultSafely(sdk)).vault;
     }
     if (vault) {
       await ctx.setActiveVault(vault);
@@ -17440,6 +17492,7 @@ program.command("schema", { hidden: true }).description("Output machine-readable
 async function startInteractiveMode() {
   const serverEndpoints = resolveServerEndpoints(parseServerEndpointOverridesFromArgv(process.argv.slice(2)));
   const sdk = new Vultisig6({
+    storage: createVaultStorage(),
     onPasswordRequired: createPasswordCallback(),
     ...serverEndpoints ? { serverEndpoints } : {}
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.19.7",
+  "version": "2.19.10",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -74,9 +74,9 @@
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
     "@vultisig/client-shared": "^0.2.17",
-    "@vultisig/core-chain": "^2.24.0",
+    "@vultisig/core-chain": "^2.24.2",
     "@vultisig/rujira": "^52.0.0",
-    "@vultisig/sdk": "^2.19.7",
+    "@vultisig/sdk": "^2.19.10",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",