@vultisig/cli 2.21.0 → 2.22.0

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # @vultisig/cli
 
+## 2.22.0
+
+### Patch Changes
+
+- [#1583](https://github.com/vultisig/vultisig-sdk/pull/1583) [`028b3ce`](https://github.com/vultisig/vultisig-sdk/commit/028b3cec5e56e5ab41de5eeb66f6837af9e1dd27) Thanks [@Toby1009](https://github.com/Toby1009)! - Move every Sui read, simulation and broadcast off JSON-RPC.
+
+  Sui is retiring JSON-RPC: shutdown on Foundation mainnet full nodes began the
+  week of 2026-07-27 and full decommission (code removal) lands mid-October 2026,
+  after which no provider can serve it. This is a scheduled migration ahead of
+  that date, NOT a fix for a live outage — as of 2026-07-27 both
+  `sui-rpc.publicnode.com` and `fullnode.mainnet.sui.io` still answer JSON-RPC.
+
+  - `getSuiClient()` now returns a `SuiGrpcClient` pointed at
+    `https://fullnode.mainnet.sui.io:443` (gRPC-web over HTTPS).
+  - React Native uses `SuiGraphQLClient` against
+    `https://graphql.mainnet.sui.io/graphql` instead: grpc-web needs
+    `Response.body` streaming, which Hermes' fetch does not provide. Both clients
+    implement the same unified transport interface, so callsites are identical.
+  - Balance, coin metadata, coin listing, tx hash, tx status, broadcast and
+    keysign gas refinement moved to `getBalance` / `getCoinMetadata` / `listCoins`
+    / `simulateTransaction` / `getTransaction` / `executeTransaction`.
+  - The dependency-free `@vultisig/sdk` balance tools (`getSuiBalance`,
+    `getSuiTokenBalance`, `getSuiAllBalances`) now POST Sui GraphQL and follow the
+    paginated `balances` connection to completion, returning `tokens_unavailable`
+    rather than a silently truncated portfolio.
+
+  Broadcast-error classification follows the transport. A gRPC failure carries the
+  grpc-status NAME in `code` (not a JSON-RPC number) and a percent-encoded message,
+  so both classifiers were re-pointed:
+
+  - `isTransientBroadcastError` retries `UNAVAILABLE` / `DEADLINE_EXCEEDED` /
+    `RESOURCE_EXHAUSTED` and decodes the message before pattern-matching. A
+    grpc-web response is HTTP 200 with the real status in the trailer, so the
+    existing 5xx branch never saw a busy or restarting node.
+  - The CLI's permanent-vs-retryable gate matches `INVALID_ARGUMENT` instead of
+    the numeric `-32002`. Left unchanged, that gate would have gone dead and every
+    permanent Sui rejection would have been re-broadcast as if transient.
+
+  Breaking for direct consumers: `assertSuiTxSucceeded` now takes the unified
+  client's transaction result (`{ $kind, Transaction | FailedTransaction }`)
+  instead of a JSON-RPC effects object.
+
+- Updated dependencies [[`4b14790`](https://github.com/vultisig/vultisig-sdk/commit/4b14790fb5f0fa5b9a58f6fe5575ad4c2bab3867), [`70f4583`](https://github.com/vultisig/vultisig-sdk/commit/70f4583a359f988460633b44046bf5811c9c0f74), [`98ec3bf`](https://github.com/vultisig/vultisig-sdk/commit/98ec3bfdcf0831df00ceec6618c796dbfa2c4d13), [`bb5b62c`](https://github.com/vultisig/vultisig-sdk/commit/bb5b62c60ca298d0aa98614e8c2b01eeef0d8bdb), [`d7fd8fd`](https://github.com/vultisig/vultisig-sdk/commit/d7fd8fd891d2bb9f007b3feff5b31cc961bae497), [`3cf9cdc`](https://github.com/vultisig/vultisig-sdk/commit/3cf9cdc14f0069f231f2ea0cede3cec155af95d5), [`f99133d`](https://github.com/vultisig/vultisig-sdk/commit/f99133dc7a99f44bbe78ba43fa59e7ec761c73e1), [`3cf9cdc`](https://github.com/vultisig/vultisig-sdk/commit/3cf9cdc14f0069f231f2ea0cede3cec155af95d5), [`6142529`](https://github.com/vultisig/vultisig-sdk/commit/6142529abc39bb548be8b1f32453f0207584c4e2), [`028b3ce`](https://github.com/vultisig/vultisig-sdk/commit/028b3cec5e56e5ab41de5eeb66f6837af9e1dd27), [`70f4583`](https://github.com/vultisig/vultisig-sdk/commit/70f4583a359f988460633b44046bf5811c9c0f74), [`e76ba9b`](https://github.com/vultisig/vultisig-sdk/commit/e76ba9ba78ec52f30f3678ef4acc933ef5712cdc), [`4777264`](https://github.com/vultisig/vultisig-sdk/commit/47772647b90336ae3297d208777523592f69dde4), [`89410fb`](https://github.com/vultisig/vultisig-sdk/commit/89410fbb0abf3ad05919fb38d1abc74a5acf9a6b), [`787e755`](https://github.com/vultisig/vultisig-sdk/commit/787e755d230d1e0fa012583d6edd8b7fa5aad88d)]:
+  - @vultisig/core-chain@2.29.0
+  - @vultisig/sdk@2.22.0
+  - @vultisig/rujira@55.0.0
+
+## 2.21.1
+
+### Patch Changes
+
+- [#1435](https://github.com/vultisig/vultisig-sdk/pull/1435) [`69e2fc2`](https://github.com/vultisig/vultisig-sdk/commit/69e2fc2f92c053294b0276440306be5871988be9) Thanks [@rcoderdev](https://github.com/rcoderdev)! - Keep browser vault storage on the backend selected during initialization. IndexedDB failures and quota errors now surface without silently switching to a partial localStorage or in-memory view, while legacy localStorage vaults retain their backend across reloads.
+
+- [#1179](https://github.com/vultisig/vultisig-sdk/pull/1179) [`0c80a06`](https://github.com/vultisig/vultisig-sdk/commit/0c80a062bde65c4938a29ce8c1fb6052028615e1) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Route the CLI version cache, version output, and VaultStateStore local state through `VULTISIG_CONFIG_DIR` so they stay co-located with SDK vault storage and other shared CLI state.
+
+- Updated dependencies [[`69e2fc2`](https://github.com/vultisig/vultisig-sdk/commit/69e2fc2f92c053294b0276440306be5871988be9), [`0c80a06`](https://github.com/vultisig/vultisig-sdk/commit/0c80a062bde65c4938a29ce8c1fb6052028615e1), [`1292e83`](https://github.com/vultisig/vultisig-sdk/commit/1292e83b1d370eff35ecd95b94e83689b724ca36), [`aa47b4a`](https://github.com/vultisig/vultisig-sdk/commit/aa47b4a03c7391d13c738cba68b13a1526d1c502), [`b8d0639`](https://github.com/vultisig/vultisig-sdk/commit/b8d063904673890f0a956a56f6474d678ceaba3c), [`32e5d36`](https://github.com/vultisig/vultisig-sdk/commit/32e5d369ae4723299a6cb8f694da1782dbf207c2)]:
+  - @vultisig/sdk@2.21.1
+  - @vultisig/client-shared@0.3.0
+  - @vultisig/core-chain@2.28.0
+
 ## 2.21.0
 
 ### Minor Changes

package/dist/index.js

@@ -5121,7 +5121,15 @@ var EVM_PERMANENT_BROADCAST_INPUT_RE = /failed to decode signed transaction|coul
 var UTXO_PERMANENT_BROADCAST_INPUT_RE = /\bTX decode failed\b/i;
 var SOLANA_PERMANENT_BROADCAST_INPUT_RE = /failed to deserialize(?: transaction)?|failed to sanitize|(?:transaction )?signature verification (?:failed|failure)|non-base58 character|invalid base58/i;
 var SUI_REQUIRED_FIELDS_GUARD_RE = /Sui broadcast requires JSON with "unsignedTx" and "signature" fields/i;
-var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction (?:data|bytes)/i;
+var SUI_PERMANENT_GRPC_STATUS = "INVALID_ARGUMENT";
+var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction(?: (?:data|bytes))?\b/i;
+var decodeRpcDetails = (details) => {
+  try {
+    return decodeURIComponent(details);
+  } catch {
+    return details;
+  }
+};
 var COSMOS_PERMANENT_SDK_CODES = {
   2: /tx parse error/i,
   4: /unauthorized|signature verification failed/i,
@@ -5151,7 +5159,8 @@ var permanentBroadcastInputClassifiers = {
   sui: (err, details) => {
     if (SUI_REQUIRED_FIELDS_GUARD_RE.test(details)) return true;
     const rpcCode = err.originalError?.code;
-    return rpcCode === -32002 && SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details);
+    if (rpcCode !== SUI_PERMANENT_GRPC_STATUS) return false;
+    return SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details) || SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(decodeRpcDetails(details));
   },
   cosmos: (_err, details) => isCosmosPermanentBroadcastInput(details)
 };
@@ -10210,8 +10219,8 @@ init_formatUnits();
 
 // src/core/VaultStateStore.ts
 import * as fs3 from "node:fs";
-import * as os from "node:os";
 import * as path3 from "node:path";
+import { getVultisigConfigDir } from "@vultisig/client-shared";
 var LOCK_STALE_MS = 6e4;
 var LOCK_RETRY_INIT_MS = 100;
 var LOCK_MAX_WAIT_MS = 3e4;
@@ -10223,7 +10232,7 @@ var VaultStateStore = class {
     if (!safeId) {
       throw new Error("Invalid vaultId: must contain alphanumeric characters");
     }
-    this.baseDir = path3.join(os.homedir(), ".vultisig", "vault-state", safeId);
+    this.baseDir = path3.join(getVultisigConfigDir(), "vault-state", safeId);
     fs3.mkdirSync(this.baseDir, { recursive: true });
   }
   // -------------------------------------------------------------------------
@@ -11992,6 +12001,7 @@ var CLI_SIGNABLE_PREP_TOOLS = /* @__PURE__ */ new Set([
   "execute_send",
   "execute_contract_call"
 ]);
+var CLI_SIGNABLE_YIELD_TOOLS = /* @__PURE__ */ new Set(["yield_enter", "yield_exit"]);
 function asRecord(value) {
   if (typeof value === "string") {
     try {
@@ -12092,11 +12102,50 @@ function buildTxReadyFromToolOutput(toolName, output) {
   }
   return { __buildTx: true, chain: chainStr, chain_id: chainIdStr, ...action ? { action } : {}, tx: main };
 }
+function buildTxReadyFromYieldOutput(toolName, output) {
+  if (!CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) return null;
+  const env = asRecord(output);
+  if (!env) return null;
+  if (env.status === "error" || "error" in env) return null;
+  const chain = asChainString(env.chain);
+  if (!chain) return null;
+  const resolved = resolveChain(chain);
+  if (!resolved || getChainKind4(resolved) !== "evm") return null;
+  const chainStr = chain;
+  const rawTxs = env.transactions;
+  if (!Array.isArray(rawTxs) || rawTxs.length === 0) return null;
+  const legs = [];
+  for (const raw of rawTxs) {
+    const legObj = asRecord(raw);
+    if (!legObj) return null;
+    if (legObj.status === "error" || "error" in legObj) return null;
+    const leg = extractLeg(legObj);
+    if (!leg) return null;
+    legs.push(leg);
+  }
+  if (legs.length > 2) return null;
+  const action = typeof env.action === "string" && env.action !== "" ? env.action : void 0;
+  if (legs.length === 2) {
+    const [approveLeg, mainLeg] = legs;
+    return {
+      __buildTx: true,
+      chain: chainStr,
+      ...action ? { action } : {},
+      approvalTxArgs: { chain: chainStr, tx: approveLeg },
+      txArgs: { chain: chainStr, tx: mainLeg }
+    };
+  }
+  return { __buildTx: true, chain: chainStr, ...action ? { action } : {}, tx: legs[0] };
+}
 function deriveToolOutputCandidate(toolName, output) {
   if (CLI_SIGNABLE_FLAT_TOOLS.has(toolName)) {
     const payload = buildTxReadyFromToolOutput(toolName, output);
     return payload ? { payload, source: "flat", toolName } : null;
   }
+  if (CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) {
+    const payload = buildTxReadyFromYieldOutput(toolName, output);
+    return payload ? { payload, source: "yield", toolName } : null;
+  }
   if (CLI_SIGNABLE_PREP_TOOLS.has(toolName)) {
     const env = asRecord(output);
     if (!env || env.status === "error" || "error" in env) return null;
@@ -12713,7 +12762,8 @@ var AgentClient = class {
   maybeSignToolOutput(status, toolName, output, callbacks, v1Type) {
     if (v1Type === "tool-output-error") return;
     if (status !== "done" || !toolName || !callbacks.onToolOutputTx) return;
-    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName)) return;
+    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName) && !CLI_SIGNABLE_YIELD_TOOLS.has(toolName))
+      return;
     const candidate = deriveToolOutputCandidate(toolName, output);
     if (!candidate) return;
     if (this.verbose)
@@ -13298,13 +13348,13 @@ import {
   statSync as statSync3,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir2 } from "node:os";
 import { dirname as dirname2, join as join3 } from "node:path";
 var LOCK_RETRY_MS = 25;
 var LOCK_MAX_WAIT_MS2 = 5e3;
 var LOCK_STALE_MS2 = 3e4;
 function getTokenCachePath() {
-  const dir = process.env.VULTISIG_CONFIG_DIR ?? join3(homedir3(), ".vultisig");
+  const dir = process.env.VULTISIG_CONFIG_DIR ?? join3(homedir2(), ".vultisig");
   return join3(dir, "agent-tokens.json");
 }
 function tokenCacheKey(scope) {
@@ -15074,15 +15124,15 @@ function formatDate(iso) {
 }
 
 // src/lib/version.ts
+import { getVultisigConfigDir as getVultisigConfigDir2 } from "@vultisig/client-shared";
 import chalk11 from "chalk";
 import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { homedir as homedir4 } from "os";
 import { join as join4 } from "path";
 var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.21.0";
+    cachedVersion = "2.22.0";
     return cachedVersion;
   }
   try {
@@ -15095,7 +15145,7 @@ function getVersion() {
     return cachedVersion;
   }
 }
-var CACHE_DIR = join4(homedir4(), ".vultisig", "cache");
+var CACHE_DIR = join4(getVultisigConfigDir2(), "cache");
 var VERSION_CACHE_FILE = join4(CACHE_DIR, "version-check.json");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 function readVersionCache() {
@@ -15179,11 +15229,12 @@ function formatVersionShort() {
 }
 function formatVersionDetailed() {
   const lines = [];
+  const configDir = getVultisigConfigDir2();
   lines.push(chalk11.bold(`Vultisig CLI v${getVersion()}`));
   lines.push("");
   lines.push(`  Node.js:   ${process.version}`);
   lines.push(`  Platform:  ${process.platform}-${process.arch}`);
-  lines.push(`  Config:    ~/.vultisig/`);
+  lines.push(`  Config:    ${configDir}`);
   return lines.join("\n");
 }
 function detectInstallMethod() {
@@ -16621,7 +16672,7 @@ Error: ${error2.message}`));
 import { SUPPORTED_CHAINS as SUPPORTED_CHAINS2 } from "@vultisig/sdk";
 import { program } from "commander";
 import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir3 } from "os";
 import { join as join5 } from "path";
 var tabtab = null;
 async function getTabtab() {
@@ -16645,7 +16696,7 @@ function getChains() {
 }
 function getVaultNames() {
   try {
-    const vaultDir = join5(homedir5(), ".vultisig", "vaults");
+    const vaultDir = join5(homedir3(), ".vultisig", "vaults");
     if (!existsSync3(vaultDir)) return [];
     const files = readdirSync(vaultDir);
     const names = [];
@@ -16898,11 +16949,11 @@ complete -c vsig -n "__fish_seen_subcommand_from import export" -a "(__fish_comp
 
 // src/lib/config.ts
 import { FileStorage } from "@vultisig/sdk/node";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir4 } from "os";
 import { join as join6 } from "path";
 function getConfigDir() {
   const override = process.env.VULTISIG_CONFIG_DIR?.trim();
-  return override ? override : join6(homedir6(), ".vultisig");
+  return override ? override : join6(homedir4(), ".vultisig");
 }
 function createVaultStorage() {
   return new FileStorage({ basePath: getConfigDir() });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.21.0",
+  "version": "2.22.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -73,10 +73,10 @@
     "@cosmjs/stargate": "^0.39.0",
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
-    "@vultisig/client-shared": "^0.2.17",
-    "@vultisig/core-chain": "^2.27.0",
-    "@vultisig/rujira": "^54.0.0",
-    "@vultisig/sdk": "^2.21.0",
+    "@vultisig/client-shared": "^0.3.0",
+    "@vultisig/core-chain": "^2.29.0",
+    "@vultisig/rujira": "^55.0.0",
+    "@vultisig/sdk": "^2.22.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",