@vultisig/cli 2.19.7 → 2.19.11

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @vultisig/cli
 
+## 2.19.11
+
+### Patch Changes
+
+- [#1129](https://github.com/vultisig/vultisig-sdk/pull/1129) [`5949742`](https://github.com/vultisig/vultisig-sdk/commit/59497426a238a75576e92d18023747d66c9d4e7a) Thanks [@neavra](https://github.com/neavra)! - fix(portfolio): report per-chain failures instead of silently swallowing them. The `portfolio` command now fetches each chain independently — one unreachable chain no longer fails the whole command, and a fiat-value lookup failure no longer silently drops the value. The `-o json` envelope always carries a `failures: [{ chain, stage, error }]` array (empty on full success), partial failures still exit 0, and an all-chains-failed run exits with a network error (code 3).
+
+- Updated dependencies [[`3bf18a1`](https://github.com/vultisig/vultisig-sdk/commit/3bf18a18606fd1b45d50abb562eb6c3011182d48)]:
+  - @vultisig/sdk@2.19.11
+
+## 2.19.10
+
+### Patch Changes
+
+- [#1076](https://github.com/vultisig/vultisig-sdk/pull/1076) [`5179edd`](https://github.com/vultisig/vultisig-sdk/commit/5179edd9eb25b392941f9649a455e92bfd5bf8b5) Thanks [@neavra](https://github.com/neavra)! - fix(chains): validate `chains --add <chain>` against the registry before persisting
+
+  An invalid `chains --add fakechain` correctly reported INVALID_CHAIN but still wrote
+  "fakechain" to the vault's chain list (chain resolution falls back to the raw user
+  string when the name doesn't match the registry). Every subsequent address-deriving
+  command then re-derived the bogus chain and dumped a stack trace to stderr until it was
+  manually removed. The `--add` path now validates against the supported-chain registry
+  first and fails closed — nothing is persisted for an unsupported chain.
+
+- [#1127](https://github.com/vultisig/vultisig-sdk/pull/1127) [`dea1efa`](https://github.com/vultisig/vultisig-sdk/commit/dea1efae6fbd2975de4ac5a26b2e8210999a0f4f) Thanks [@neavra](https://github.com/neavra)! - fix(cli): honor VULTISIG_CONFIG_DIR for vault storage
+
+  The documented `VULTISIG_CONFIG_DIR` env var was a no-op for vault storage: the
+  CLI constructed the SDK without a storage override, so vaults, the active-vault
+  pointer and cache always resolved to `~/.vultisig` even when the var pointed
+  elsewhere — only `config.json` and the agent journal honored it, producing a
+  split-brain config location that broke CI/container isolation and multi-tenant
+  use. The CLI now roots SDK vault storage at `getConfigDir()` via a shared
+  `createVaultStorage()` helper. When the var is unset it falls back to
+  `~/.vultisig`, so the default location is unchanged.
+
+- [#1126](https://github.com/vultisig/vultisig-sdk/pull/1126) [`6054ff5`](https://github.com/vultisig/vultisig-sdk/commit/6054ff599e4133c9853f31e8ca2413ab52f606fb) Thanks [@neavra](https://github.com/neavra)! - fix(mpc): keep keygen tracing off stdout so `-o json` output stays parseable
+
+  The DKLS and Schnorr keygen/reshare/key-import ceremonies logged progress
+  (session ids, raw wire messages, "keygen complete", …) to stdout via ungated
+  `console.log`. stdout is the machine channel for the CLI's `-o json` mode, so
+  the documented `create fast … -o json` agent flow produced unparseable stdout
+  (`JSON.parse(stdout)` failed on the leading garbage) and leaked MPC internals
+  into terminals and CI logs.
+
+  Route that tracing through a gated logger that writes to stderr only when
+  `VULTISIG_DEBUG=1`, so stdout carries only the final JSON envelope while
+  the debug output stays available to humans on demand. No keygen behavior
+  changes — only the log sink moves off stdout.
+
+- [#1077](https://github.com/vultisig/vultisig-sdk/pull/1077) [`5e5494c`](https://github.com/vultisig/vultisig-sdk/commit/5e5494cf103ea5c17431b6a6231b30931eb004bb) Thanks [@neavra](https://github.com/neavra)! - Tolerate a corrupt `activeVaultId.json` at startup. A truncated or unparseable
+  active-vault pointer used to throw during CLI initialization, which broke every
+  command — including `vultisig vaults`, the one you run to recover. The pointer
+  read now fails open (treated as "no active vault") and self-heals by clearing
+  the bad pointer, so vaults still list with none marked active.
+- Updated dependencies [[`280956f`](https://github.com/vultisig/vultisig-sdk/commit/280956f1743564ea271a03c4735f70151b63f161), [`90070f3`](https://github.com/vultisig/vultisig-sdk/commit/90070f39be011821f7508c7ff094025861dce040), [`0e3f86d`](https://github.com/vultisig/vultisig-sdk/commit/0e3f86db82ed086b1e200a6f83434a638f593c17), [`6054ff5`](https://github.com/vultisig/vultisig-sdk/commit/6054ff599e4133c9853f31e8ca2413ab52f606fb), [`b37e726`](https://github.com/vultisig/vultisig-sdk/commit/b37e7264db3291adca1cb366f1311446d6add439), [`1b2636b`](https://github.com/vultisig/vultisig-sdk/commit/1b2636b535736a711fc537a87d2f51090fe6342d), [`2c9d34e`](https://github.com/vultisig/vultisig-sdk/commit/2c9d34e0837f68d92769c7aefa566ffb1c0c52c7), [`ffc75a6`](https://github.com/vultisig/vultisig-sdk/commit/ffc75a6e76af699a78b0fc3411ab052ce5000c91), [`fc595a1`](https://github.com/vultisig/vultisig-sdk/commit/fc595a17cb4901af1dfeac2521b93bb75823068f), [`776c539`](https://github.com/vultisig/vultisig-sdk/commit/776c5398764314f140f18ab4f86a1801fe9fdfe6)]:
+  - @vultisig/sdk@2.19.10
+  - @vultisig/core-chain@2.24.2
+
 ## 2.19.7
 
 ### Patch Changes

package/README.md

@@ -1153,6 +1153,43 @@ Configuration is stored in `~/.vultisig/`:
 > truth) and are covered by a doc-lint test that fails if this table drifts from the code. Run
 > `vultisig --help` for the same list.
 
+### Partial failures (`portfolio`)
+
+The `portfolio` command fetches every chain independently, so one unreachable chain no longer
+fails the whole command. The `-o json` envelope always carries a `failures` array (empty when
+everything succeeded):
+
+```jsonc
+{
+  "success": true,
+  "v": 1,
+  "data": {
+    "portfolio": { "totalValue": { ... }, "chainBalances": [ /* only the chains that loaded */ ] },
+    "currency": "usd",
+    "failures": [
+      { "chain": "Bitcoin", "stage": "balance", "error": "ECONNREFUSED btc-rpc" },
+      { "chain": "Ethereum", "stage": "value",   "error": "pricing service unavailable" }
+    ]
+  }
+}
+```
+
+- `stage: "balance"` — the balance fetch failed; the chain is omitted from `chainBalances`.
+- `stage: "value"` — the balance loaded but its fiat value did not; the chain still appears in
+  `chainBalances` (without a `value`) and is also listed here.
+- `error` is a concise single-line message — never a stack trace or filesystem path.
+
+**Partial-success exit contract:** if _some_ chains loaded, the command exits **0** and reports
+the rest under `failures`. Machine consumers should branch on `data.failures.length`, not `$?`.
+If _every_ chain fails to fetch a balance, the command exits **3** (network error, retryable).
+On the human-readable (table) output, failures are printed as `Warning:` lines below the table.
+
+> **Note on `totalValue`:** `failures` describes the per-chain _breakdown_ pass (`chainBalances`).
+> `portfolio.totalValue` is computed by an independent best-effort aggregate that includes token
+> values (not just native) and silently omits any chain/token it could not price. It is therefore
+> not guaranteed to be consistent with `chainBalances`/`failures` — treat it as an approximate
+> total, and rely on `failures` (not the total) to detect which chains had problems.
+
 ## Troubleshooting
 
 ### "No active vault" error

package/dist/index.js

@@ -5839,6 +5839,10 @@ async function confirmSwap() {
 }
 
 // src/commands/balance.ts
+function conciseError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return message.split("\n")[0].trim() || "Unknown error";
+}
 async function executeBalance(ctx2, options = {}) {
   const vault = await ctx2.ensureActiveVault();
   const spinner = createSpinner("Loading balances...");
@@ -5876,257 +5880,82 @@ async function executePortfolio(ctx2, options = {}) {
   const spinner = createSpinner(`Loading portfolio in ${currencyName}...`);
   const totalValue = await vault.getTotalValue(currency);
   const chains = vault.chains;
-  const chainBalances = await Promise.all(
+  const results = await Promise.all(
     chains.map(async (chain) => {
-      const balance = await vault.balance(chain);
+      let balance;
+      try {
+        balance = await vault.balance(chain);
+      } catch (err) {
+        return { failure: { chain, stage: "balance", error: conciseError(err) } };
+      }
       try {
         const value = await vault.getValue(chain, void 0, currency);
-        return { chain, balance, value };
-      } catch {
-        return { chain, balance };
+        return { entry: { chain, balance, value } };
+      } catch (err) {
+        return { entry: { chain, balance }, failure: { chain, stage: "value", error: conciseError(err) } };
       }
     })
   );
+  const chainBalances = [];
+  const failures = [];
+  for (const result of results) {
+    if (result.entry) chainBalances.push(result.entry);
+    if (result.failure) failures.push(result.failure);
+  }
+  if (failures.length > 0 && chainBalances.length === 0) {
+    spinner.fail("Portfolio failed to load");
+    throw new NetworkError(
+      `Failed to load balances for all ${failures.length} chain(s): ${failures.map((f) => `${f.chain} (${f.error})`).join("; ")}`,
+      "All chain balance fetches failed \u2014 likely a network/RPC issue",
+      ["Check your internet connection", "Retry in a few moments"]
+    );
+  }
   const portfolio = { totalValue, chainBalances };
   spinner.succeed("Portfolio loaded");
   if (isJsonOutput()) {
-    outputJson({ portfolio, currency });
+    outputJson({ portfolio, currency, failures });
     return;
   }
   displayPortfolio(portfolio, currency, options.raw ?? false);
+  if (failures.length > 0) {
+    warn(`
+Warning: ${failures.length} chain(s) failed to load fully:`);
+    for (const f of failures) {
+      warn(`  - ${f.chain} (${f.stage}): ${f.error}`);
+    }
+  }
 }
 
 // src/commands/chains.ts
 import { SUPPORTED_CHAINS } from "@vultisig/sdk";
 import chalk3 from "chalk";
-async function executeChains(ctx2, options = {}) {
-  const vault = await ctx2.ensureActiveVault();
-  if (options.addAll) {
-    const currentCount = vault.chains.length;
-    const spinner = createSpinner(`Adding all ${SUPPORTED_CHAINS.length} supported chains...`);
-    await vault.setChains([...SUPPORTED_CHAINS]);
-    const addedCount = SUPPORTED_CHAINS.length - currentCount;
-    spinner.succeed(`Added ${addedCount} chains (${SUPPORTED_CHAINS.length} total)`);
-    if (isJsonOutput()) {
-      outputJson({ chains: [...vault.chains], added: addedCount, total: SUPPORTED_CHAINS.length });
-      return;
-    }
-    info(chalk3.gray("\nAll supported chains are now enabled."));
-    return;
-  }
-  if (options.add) {
-    const alreadyActive = vault.chains.includes(options.add);
-    if (!alreadyActive) {
-      await vault.addChain(options.add);
-    }
-    const address = await vault.address(options.add);
-    if (isJsonOutput()) {
-      outputJson({ chain: options.add, alreadyActive, address, chains: [...vault.chains] });
-      return;
-    }
-    success(alreadyActive ? `
-Chain already active: ${options.add}` : `
-+ Added chain: ${options.add}`);
-    info(`Address: ${address}`);
-  } else if (options.remove) {
-    await vault.removeChain(options.remove);
-    if (isJsonOutput()) {
-      outputJson({ chain: options.remove, removed: true, chains: [...vault.chains] });
-      return;
-    }
-    success(`
-+ Removed chain: ${options.remove}`);
-  } else {
-    const chains = vault.chains;
-    if (isJsonOutput()) {
-      outputJson({ chains: [...chains] });
-      return;
-    }
-    printResult(chalk3.cyan("\nActive Chains:\n"));
-    chains.forEach((chain) => {
-      printResult(`  - ${chain}`);
-    });
-    info(chalk3.gray(`
-${chains.length} of ${SUPPORTED_CHAINS.length} chains enabled`));
-    info(chalk3.gray("Use --add <chain>, --add-all, or --remove <chain>"));
-  }
-}
-async function executeAddresses(ctx2) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner("Loading addresses...");
-  const addresses = await vault.addresses();
-  spinner.succeed("Addresses loaded");
-  if (isJsonOutput()) {
-    outputJson({ addresses });
-    return;
-  }
-  displayAddresses(addresses);
-}
 
-// src/commands/tokens.ts
-import chalk4 from "chalk";
-import inquirer3 from "inquirer";
-async function executeTokens(ctx2, options) {
-  await ctx2.ensureActiveVault();
-  if (options.discover) {
-    await discoverTokens(ctx2, options.chain);
-    return;
-  }
-  if (options.add) {
-    let symbol = options.symbol;
-    let name = options.name;
-    let decimals = options.decimals;
-    const prompts = [];
-    if (!symbol) {
-      prompts.push({
-        type: "input",
-        name: "symbol",
-        message: "Enter token symbol (e.g., USDT):",
-        validate: (input) => input.trim() !== "" || "Symbol is required"
-      });
-    }
-    if (!name) {
-      prompts.push({
-        type: "input",
-        name: "name",
-        message: "Enter token name (e.g., Tether USD):",
-        validate: (input) => input.trim() !== "" || "Name is required"
-      });
-    }
-    if (decimals === void 0) {
-      prompts.push({
-        type: "number",
-        name: "decimals",
-        message: "Enter token decimals:",
-        default: 18,
-        validate: (input) => input >= 0 || "Decimals must be non-negative"
-      });
-    }
-    if (prompts.length > 0) {
-      requireInteractive("Provide --symbol, --name, and --decimals flags for non-interactive token addition.");
-      const answers = await inquirer3.prompt(prompts);
-      symbol = symbol || answers.symbol?.trim();
-      name = name || answers.name?.trim();
-      decimals = decimals ?? answers.decimals;
-    }
-    await addToken(ctx2, {
-      chain: options.chain,
-      contractAddress: options.add,
-      symbol,
-      name,
-      decimals
-    });
-  } else if (options.remove) {
-    await removeToken(ctx2, options.chain, options.remove);
-  } else {
-    await listTokens(ctx2, options.chain);
-  }
-}
-async function addToken(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  await vault.addToken(options.chain, {
-    id: `${options.chain}-${options.contractAddress}`,
-    contractAddress: options.contractAddress,
-    symbol: options.symbol,
-    name: options.name,
-    decimals: options.decimals,
-    chainId: options.chain,
-    isNative: false
-  });
-  success(`
-+ Added token ${options.symbol} on ${options.chain}`);
-}
-async function removeToken(ctx2, chain, tokenId) {
-  const vault = await ctx2.ensureActiveVault();
-  await vault.removeToken(chain, tokenId);
-  success(`
-+ Removed token ${tokenId} from ${chain}`);
-}
-async function discoverTokens(ctx2, chain) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner(`Discovering tokens on ${chain}...`);
-  let discovered;
+// src/core/active-vault.ts
+var ACTIVE_VAULT_ID_KEY = "activeVaultId";
+async function loadActiveVaultSafely(sdk) {
+  let activeId;
   try {
-    discovered = await vault.discoverTokens(chain);
+    activeId = await sdk.storage.get(ACTIVE_VAULT_ID_KEY);
   } catch (err) {
-    spinner.fail(`Token discovery failed for ${chain}`);
-    throw err;
-  }
-  if (discovered.length === 0) {
-    spinner.succeed(`No new tokens found on ${chain}`);
-    if (isJsonOutput()) {
-      outputJson({ chain, discovered: [], count: 0 });
+    process.stderr.write(
+      `Warning: active vault pointer is unreadable and was ignored (no active vault). ${err?.message ?? ""}
+`
+    );
+    try {
+      await sdk.setActiveVault(null);
+    } catch {
     }
-    return;
+    return { vault: null, corruptPointer: true };
   }
-  const existingTokens = vault.getTokens(chain);
-  const existingAddresses = new Set(existingTokens.map((t) => t.contractAddress ?? t.id));
-  const newTokens = discovered.filter((d) => d.contractAddress && !existingAddresses.has(d.contractAddress));
-  for (const d of newTokens) {
-    await vault.addToken(chain, {
-      id: d.contractAddress,
-      symbol: d.ticker,
-      name: d.ticker,
-      decimals: d.decimals,
-      contractAddress: d.contractAddress,
-      chainId: chain,
-      isNative: false
-    });
+  if (activeId === null || activeId === void 0) {
+    return { vault: null, corruptPointer: false };
   }
-  const allTokens = vault.getTokens(chain);
-  spinner.succeed(`Discovered ${newTokens.length} new token(s) on ${chain}`);
-  if (isJsonOutput()) {
-    outputJson({
-      chain,
-      discovered: newTokens.map((d) => ({
-        symbol: d.ticker,
-        contractAddress: d.contractAddress,
-        decimals: d.decimals
-      })),
-      count: newTokens.length
-    });
-    return;
-  }
-  for (const d of newTokens) {
-    printResult(`  ${d.ticker} (${d.contractAddress})`);
-  }
-  info(chalk4.gray(`
-${allTokens.length} total token(s) tracked on ${chain}`));
+  return { vault: await sdk.getVaultById(activeId), corruptPointer: false };
 }
-async function listTokens(ctx2, chain) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner(`Loading tokens for ${chain}...`);
-  const tokens = vault.getTokens(chain);
-  spinner.succeed(`Tokens loaded for ${chain}`);
-  if (isJsonOutput()) {
-    outputJson({ chain, tokens: tokens || [] });
-    return;
-  }
-  if (!tokens || tokens.length === 0) {
-    warn(`
-No tokens configured for ${chain}`);
-    info(chalk4.gray(`
-Use --add <contractAddress> to add a token`));
-  } else {
-    printResult(chalk4.cyan(`
-Tokens for ${chain}:
-`));
-    const table = tokens.map((token) => ({
-      Symbol: token.symbol,
-      Name: token.name,
-      Contract: token.contractAddress || "N/A",
-      Decimals: token.decimals,
-      Native: token.isNative ? "Yes" : "No"
-    }));
-    printTable(table);
-    info(chalk4.gray(`
-Use --add <contractAddress> to add or --remove <tokenId> to remove`));
-  }
+function shouldAutoSelectActiveVault(hasActiveVault, corruptPointer, vaultCount) {
+  return !hasActiveVault && !corruptPointer && vaultCount > 0;
 }
 
-// src/commands/transaction.ts
-import { Chain, Vultisig as Vultisig2 } from "@vultisig/sdk";
-
 // src/agent/broadcastJournal.ts
 import { createHash } from "node:crypto";
 import {
@@ -6703,7 +6532,242 @@ import { getConfigPath, loadConfig, saveConfig } from "@vultisig/client-shared";
 // src/core/vault-discovery.ts
 import { discoverVaultFiles, SEARCH_DIRS } from "@vultisig/client-shared";
 
+// src/commands/chains.ts
+async function executeChains(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  if (options.addAll) {
+    const currentCount = vault.chains.length;
+    const spinner = createSpinner(`Adding all ${SUPPORTED_CHAINS.length} supported chains...`);
+    await vault.setChains([...SUPPORTED_CHAINS]);
+    const addedCount = SUPPORTED_CHAINS.length - currentCount;
+    spinner.succeed(`Added ${addedCount} chains (${SUPPORTED_CHAINS.length} total)`);
+    if (isJsonOutput()) {
+      outputJson({ chains: [...vault.chains], added: addedCount, total: SUPPORTED_CHAINS.length });
+      return;
+    }
+    info(chalk3.gray("\nAll supported chains are now enabled."));
+    return;
+  }
+  if (options.add) {
+    if (!SUPPORTED_CHAINS.includes(options.add)) {
+      throw new InvalidChainError(
+        `Unsupported chain: "${options.add}"`,
+        'Run "vultisig chains" to see the supported chains, or check the spelling.',
+        void 0,
+        { chain: String(options.add) }
+      );
+    }
+    const alreadyActive = vault.chains.includes(options.add);
+    if (!alreadyActive) {
+      await vault.addChain(options.add);
+    }
+    const address = await vault.address(options.add);
+    if (isJsonOutput()) {
+      outputJson({ chain: options.add, alreadyActive, address, chains: [...vault.chains] });
+      return;
+    }
+    success(alreadyActive ? `
+Chain already active: ${options.add}` : `
++ Added chain: ${options.add}`);
+    info(`Address: ${address}`);
+  } else if (options.remove) {
+    await vault.removeChain(options.remove);
+    if (isJsonOutput()) {
+      outputJson({ chain: options.remove, removed: true, chains: [...vault.chains] });
+      return;
+    }
+    success(`
++ Removed chain: ${options.remove}`);
+  } else {
+    const chains = vault.chains;
+    if (isJsonOutput()) {
+      outputJson({ chains: [...chains] });
+      return;
+    }
+    printResult(chalk3.cyan("\nActive Chains:\n"));
+    chains.forEach((chain) => {
+      printResult(`  - ${chain}`);
+    });
+    info(chalk3.gray(`
+${chains.length} of ${SUPPORTED_CHAINS.length} chains enabled`));
+    info(chalk3.gray("Use --add <chain>, --add-all, or --remove <chain>"));
+  }
+}
+async function executeAddresses(ctx2) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner("Loading addresses...");
+  const addresses = await vault.addresses();
+  spinner.succeed("Addresses loaded");
+  if (isJsonOutput()) {
+    outputJson({ addresses });
+    return;
+  }
+  displayAddresses(addresses);
+}
+
+// src/commands/tokens.ts
+import chalk4 from "chalk";
+import inquirer3 from "inquirer";
+async function executeTokens(ctx2, options) {
+  await ctx2.ensureActiveVault();
+  if (options.discover) {
+    await discoverTokens(ctx2, options.chain);
+    return;
+  }
+  if (options.add) {
+    let symbol = options.symbol;
+    let name = options.name;
+    let decimals = options.decimals;
+    const prompts = [];
+    if (!symbol) {
+      prompts.push({
+        type: "input",
+        name: "symbol",
+        message: "Enter token symbol (e.g., USDT):",
+        validate: (input) => input.trim() !== "" || "Symbol is required"
+      });
+    }
+    if (!name) {
+      prompts.push({
+        type: "input",
+        name: "name",
+        message: "Enter token name (e.g., Tether USD):",
+        validate: (input) => input.trim() !== "" || "Name is required"
+      });
+    }
+    if (decimals === void 0) {
+      prompts.push({
+        type: "number",
+        name: "decimals",
+        message: "Enter token decimals:",
+        default: 18,
+        validate: (input) => input >= 0 || "Decimals must be non-negative"
+      });
+    }
+    if (prompts.length > 0) {
+      requireInteractive("Provide --symbol, --name, and --decimals flags for non-interactive token addition.");
+      const answers = await inquirer3.prompt(prompts);
+      symbol = symbol || answers.symbol?.trim();
+      name = name || answers.name?.trim();
+      decimals = decimals ?? answers.decimals;
+    }
+    await addToken(ctx2, {
+      chain: options.chain,
+      contractAddress: options.add,
+      symbol,
+      name,
+      decimals
+    });
+  } else if (options.remove) {
+    await removeToken(ctx2, options.chain, options.remove);
+  } else {
+    await listTokens(ctx2, options.chain);
+  }
+}
+async function addToken(ctx2, options) {
+  const vault = await ctx2.ensureActiveVault();
+  await vault.addToken(options.chain, {
+    id: `${options.chain}-${options.contractAddress}`,
+    contractAddress: options.contractAddress,
+    symbol: options.symbol,
+    name: options.name,
+    decimals: options.decimals,
+    chainId: options.chain,
+    isNative: false
+  });
+  success(`
++ Added token ${options.symbol} on ${options.chain}`);
+}
+async function removeToken(ctx2, chain, tokenId) {
+  const vault = await ctx2.ensureActiveVault();
+  await vault.removeToken(chain, tokenId);
+  success(`
++ Removed token ${tokenId} from ${chain}`);
+}
+async function discoverTokens(ctx2, chain) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner(`Discovering tokens on ${chain}...`);
+  let discovered;
+  try {
+    discovered = await vault.discoverTokens(chain);
+  } catch (err) {
+    spinner.fail(`Token discovery failed for ${chain}`);
+    throw err;
+  }
+  if (discovered.length === 0) {
+    spinner.succeed(`No new tokens found on ${chain}`);
+    if (isJsonOutput()) {
+      outputJson({ chain, discovered: [], count: 0 });
+    }
+    return;
+  }
+  const existingTokens = vault.getTokens(chain);
+  const existingAddresses = new Set(existingTokens.map((t) => t.contractAddress ?? t.id));
+  const newTokens = discovered.filter((d) => d.contractAddress && !existingAddresses.has(d.contractAddress));
+  for (const d of newTokens) {
+    await vault.addToken(chain, {
+      id: d.contractAddress,
+      symbol: d.ticker,
+      name: d.ticker,
+      decimals: d.decimals,
+      contractAddress: d.contractAddress,
+      chainId: chain,
+      isNative: false
+    });
+  }
+  const allTokens = vault.getTokens(chain);
+  spinner.succeed(`Discovered ${newTokens.length} new token(s) on ${chain}`);
+  if (isJsonOutput()) {
+    outputJson({
+      chain,
+      discovered: newTokens.map((d) => ({
+        symbol: d.ticker,
+        contractAddress: d.contractAddress,
+        decimals: d.decimals
+      })),
+      count: newTokens.length
+    });
+    return;
+  }
+  for (const d of newTokens) {
+    printResult(`  ${d.ticker} (${d.contractAddress})`);
+  }
+  info(chalk4.gray(`
+${allTokens.length} total token(s) tracked on ${chain}`));
+}
+async function listTokens(ctx2, chain) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner(`Loading tokens for ${chain}...`);
+  const tokens = vault.getTokens(chain);
+  spinner.succeed(`Tokens loaded for ${chain}`);
+  if (isJsonOutput()) {
+    outputJson({ chain, tokens: tokens || [] });
+    return;
+  }
+  if (!tokens || tokens.length === 0) {
+    warn(`
+No tokens configured for ${chain}`);
+    info(chalk4.gray(`
+Use --add <contractAddress> to add a token`));
+  } else {
+    printResult(chalk4.cyan(`
+Tokens for ${chain}:
+`));
+    const table = tokens.map((token) => ({
+      Symbol: token.symbol,
+      Name: token.name,
+      Contract: token.contractAddress || "N/A",
+      Decimals: token.decimals,
+      Native: token.isNative ? "Yes" : "No"
+    }));
+    printTable(table);
+    info(chalk4.gray(`
+Use --add <contractAddress> to add or --remove <tokenId> to remove`));
+  }
+}
+
 // src/commands/transaction.ts
+import { Chain, Vultisig as Vultisig2 } from "@vultisig/sdk";
 async function executeSend(ctx2, params) {
   const vault = await ctx2.ensureActiveVault();
   if (!Object.values(Chain).includes(params.chain)) {
@@ -14534,7 +14598,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.19.7";
+    cachedVersion = "2.19.11";
     return cachedVersion;
   }
   try {
@@ -16150,7 +16214,7 @@ Error: ${error2.message}`));
   async loadAllVaults() {
     const spinner = createSpinner2("Loading vaults...").start();
     try {
-      const activeVault = await this.ctx.sdk.getActiveVault();
+      const { vault: activeVault, corruptPointer } = await loadActiveVaultSafely(this.ctx.sdk);
       if (activeVault) {
         this.ctx.addVault(activeVault);
         await this.ctx.setActiveVault(activeVault);
@@ -16164,7 +16228,7 @@ Error: ${error2.message}`));
             this.eventBuffer.setupVaultListeners(vault);
           }
         });
-        if (!this.ctx.getActiveVault() && this.ctx.getVaults().size > 0) {
+        if (shouldAutoSelectActiveVault(!!this.ctx.getActiveVault(), corruptPointer, this.ctx.getVaults().size)) {
           const firstVault = this.ctx.getVaults().values().next().value;
           await this.ctx.setActiveVault(firstVault);
         }
@@ -16174,6 +16238,11 @@ Error: ${error2.message}`));
       } else {
         spinner.succeed("No vaults found");
       }
+      if (corruptPointer && !this.ctx.getActiveVault() && this.ctx.getVaults().size > 0) {
+        console.log(
+          chalk14.yellow('Active vault pointer was corrupt and has been reset. Use "vault <name>" to pick one.')
+        );
+      }
     } catch (error2) {
       if (this.ctx.getVaults().size > 0) {
         spinner.succeed(`Loaded ${this.ctx.getVaults().size} vault(s)`);
@@ -16522,6 +16591,18 @@ complete -c vsig -n "__fish_seen_subcommand_from import export" -a "(__fish_comp
 `.trim();
 }
 
+// src/lib/config.ts
+import { FileStorage } from "@vultisig/sdk/node";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
+function getConfigDir() {
+  const override = process.env.VULTISIG_CONFIG_DIR?.trim();
+  return override ? override : join6(homedir6(), ".vultisig");
+}
+function createVaultStorage() {
+  return new FileStorage({ basePath: getConfigDir() });
+}
+
 // src/lib/errors.ts
 import chalk15 from "chalk";
 
@@ -16596,6 +16677,7 @@ async function init(vaultOverride, unlockPassword, passwordTTL) {
     const globalOptions = program.opts();
     const serverEndpoints = resolveServerEndpoints(globalOptions);
     const sdk = new Vultisig6({
+      storage: createVaultStorage(),
       onPasswordRequired: createPasswordCallback(),
       ...serverEndpoints ? { serverEndpoints } : {},
       ...passwordTTL !== void 0 ? { passwordCache: { defaultTTL: passwordTTL } } : {}
@@ -16609,7 +16691,7 @@ async function init(vaultOverride, unlockPassword, passwordTTL) {
         throw new Error(`Vault not found: "${vaultSelector}"`);
       }
     } else {
-      vault = await sdk.getActiveVault();
+      vault = (await loadActiveVaultSafely(sdk)).vault;
     }
     if (vault) {
       await ctx.setActiveVault(vault);
@@ -17440,6 +17522,7 @@ program.command("schema", { hidden: true }).description("Output machine-readable
 async function startInteractiveMode() {
   const serverEndpoints = resolveServerEndpoints(parseServerEndpointOverridesFromArgv(process.argv.slice(2)));
   const sdk = new Vultisig6({
+    storage: createVaultStorage(),
     onPasswordRequired: createPasswordCallback(),
     ...serverEndpoints ? { serverEndpoints } : {}
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.19.7",
+  "version": "2.19.11",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -74,9 +74,9 @@
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
     "@vultisig/client-shared": "^0.2.17",
-    "@vultisig/core-chain": "^2.24.0",
+    "@vultisig/core-chain": "^2.24.2",
     "@vultisig/rujira": "^52.0.0",
-    "@vultisig/sdk": "^2.19.7",
+    "@vultisig/sdk": "^2.19.11",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",