@vultisig/cli 2.21.1 → 2.22.0

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # @vultisig/cli
 
+## 2.22.0
+
+### Patch Changes
+
+- [#1583](https://github.com/vultisig/vultisig-sdk/pull/1583) [`028b3ce`](https://github.com/vultisig/vultisig-sdk/commit/028b3cec5e56e5ab41de5eeb66f6837af9e1dd27) Thanks [@Toby1009](https://github.com/Toby1009)! - Move every Sui read, simulation and broadcast off JSON-RPC.
+
+  Sui is retiring JSON-RPC: shutdown on Foundation mainnet full nodes began the
+  week of 2026-07-27 and full decommission (code removal) lands mid-October 2026,
+  after which no provider can serve it. This is a scheduled migration ahead of
+  that date, NOT a fix for a live outage — as of 2026-07-27 both
+  `sui-rpc.publicnode.com` and `fullnode.mainnet.sui.io` still answer JSON-RPC.
+
+  - `getSuiClient()` now returns a `SuiGrpcClient` pointed at
+    `https://fullnode.mainnet.sui.io:443` (gRPC-web over HTTPS).
+  - React Native uses `SuiGraphQLClient` against
+    `https://graphql.mainnet.sui.io/graphql` instead: grpc-web needs
+    `Response.body` streaming, which Hermes' fetch does not provide. Both clients
+    implement the same unified transport interface, so callsites are identical.
+  - Balance, coin metadata, coin listing, tx hash, tx status, broadcast and
+    keysign gas refinement moved to `getBalance` / `getCoinMetadata` / `listCoins`
+    / `simulateTransaction` / `getTransaction` / `executeTransaction`.
+  - The dependency-free `@vultisig/sdk` balance tools (`getSuiBalance`,
+    `getSuiTokenBalance`, `getSuiAllBalances`) now POST Sui GraphQL and follow the
+    paginated `balances` connection to completion, returning `tokens_unavailable`
+    rather than a silently truncated portfolio.
+
+  Broadcast-error classification follows the transport. A gRPC failure carries the
+  grpc-status NAME in `code` (not a JSON-RPC number) and a percent-encoded message,
+  so both classifiers were re-pointed:
+
+  - `isTransientBroadcastError` retries `UNAVAILABLE` / `DEADLINE_EXCEEDED` /
+    `RESOURCE_EXHAUSTED` and decodes the message before pattern-matching. A
+    grpc-web response is HTTP 200 with the real status in the trailer, so the
+    existing 5xx branch never saw a busy or restarting node.
+  - The CLI's permanent-vs-retryable gate matches `INVALID_ARGUMENT` instead of
+    the numeric `-32002`. Left unchanged, that gate would have gone dead and every
+    permanent Sui rejection would have been re-broadcast as if transient.
+
+  Breaking for direct consumers: `assertSuiTxSucceeded` now takes the unified
+  client's transaction result (`{ $kind, Transaction | FailedTransaction }`)
+  instead of a JSON-RPC effects object.
+
+- Updated dependencies [[`4b14790`](https://github.com/vultisig/vultisig-sdk/commit/4b14790fb5f0fa5b9a58f6fe5575ad4c2bab3867), [`70f4583`](https://github.com/vultisig/vultisig-sdk/commit/70f4583a359f988460633b44046bf5811c9c0f74), [`98ec3bf`](https://github.com/vultisig/vultisig-sdk/commit/98ec3bfdcf0831df00ceec6618c796dbfa2c4d13), [`bb5b62c`](https://github.com/vultisig/vultisig-sdk/commit/bb5b62c60ca298d0aa98614e8c2b01eeef0d8bdb), [`d7fd8fd`](https://github.com/vultisig/vultisig-sdk/commit/d7fd8fd891d2bb9f007b3feff5b31cc961bae497), [`3cf9cdc`](https://github.com/vultisig/vultisig-sdk/commit/3cf9cdc14f0069f231f2ea0cede3cec155af95d5), [`f99133d`](https://github.com/vultisig/vultisig-sdk/commit/f99133dc7a99f44bbe78ba43fa59e7ec761c73e1), [`3cf9cdc`](https://github.com/vultisig/vultisig-sdk/commit/3cf9cdc14f0069f231f2ea0cede3cec155af95d5), [`6142529`](https://github.com/vultisig/vultisig-sdk/commit/6142529abc39bb548be8b1f32453f0207584c4e2), [`028b3ce`](https://github.com/vultisig/vultisig-sdk/commit/028b3cec5e56e5ab41de5eeb66f6837af9e1dd27), [`70f4583`](https://github.com/vultisig/vultisig-sdk/commit/70f4583a359f988460633b44046bf5811c9c0f74), [`e76ba9b`](https://github.com/vultisig/vultisig-sdk/commit/e76ba9ba78ec52f30f3678ef4acc933ef5712cdc), [`4777264`](https://github.com/vultisig/vultisig-sdk/commit/47772647b90336ae3297d208777523592f69dde4), [`89410fb`](https://github.com/vultisig/vultisig-sdk/commit/89410fbb0abf3ad05919fb38d1abc74a5acf9a6b), [`787e755`](https://github.com/vultisig/vultisig-sdk/commit/787e755d230d1e0fa012583d6edd8b7fa5aad88d)]:
+  - @vultisig/core-chain@2.29.0
+  - @vultisig/sdk@2.22.0
+  - @vultisig/rujira@55.0.0
+
 ## 2.21.1
 
 ### Patch Changes

package/dist/index.js

@@ -5121,7 +5121,15 @@ var EVM_PERMANENT_BROADCAST_INPUT_RE = /failed to decode signed transaction|coul
 var UTXO_PERMANENT_BROADCAST_INPUT_RE = /\bTX decode failed\b/i;
 var SOLANA_PERMANENT_BROADCAST_INPUT_RE = /failed to deserialize(?: transaction)?|failed to sanitize|(?:transaction )?signature verification (?:failed|failure)|non-base58 character|invalid base58/i;
 var SUI_REQUIRED_FIELDS_GUARD_RE = /Sui broadcast requires JSON with "unsignedTx" and "signature" fields/i;
-var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction (?:data|bytes)/i;
+var SUI_PERMANENT_GRPC_STATUS = "INVALID_ARGUMENT";
+var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction(?: (?:data|bytes))?\b/i;
+var decodeRpcDetails = (details) => {
+  try {
+    return decodeURIComponent(details);
+  } catch {
+    return details;
+  }
+};
 var COSMOS_PERMANENT_SDK_CODES = {
   2: /tx parse error/i,
   4: /unauthorized|signature verification failed/i,
@@ -5151,7 +5159,8 @@ var permanentBroadcastInputClassifiers = {
   sui: (err, details) => {
     if (SUI_REQUIRED_FIELDS_GUARD_RE.test(details)) return true;
     const rpcCode = err.originalError?.code;
-    return rpcCode === -32002 && SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details);
+    if (rpcCode !== SUI_PERMANENT_GRPC_STATUS) return false;
+    return SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details) || SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(decodeRpcDetails(details));
   },
   cosmos: (_err, details) => isCosmosPermanentBroadcastInput(details)
 };
@@ -11992,6 +12001,7 @@ var CLI_SIGNABLE_PREP_TOOLS = /* @__PURE__ */ new Set([
   "execute_send",
   "execute_contract_call"
 ]);
+var CLI_SIGNABLE_YIELD_TOOLS = /* @__PURE__ */ new Set(["yield_enter", "yield_exit"]);
 function asRecord(value) {
   if (typeof value === "string") {
     try {
@@ -12092,11 +12102,50 @@ function buildTxReadyFromToolOutput(toolName, output) {
   }
   return { __buildTx: true, chain: chainStr, chain_id: chainIdStr, ...action ? { action } : {}, tx: main };
 }
+function buildTxReadyFromYieldOutput(toolName, output) {
+  if (!CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) return null;
+  const env = asRecord(output);
+  if (!env) return null;
+  if (env.status === "error" || "error" in env) return null;
+  const chain = asChainString(env.chain);
+  if (!chain) return null;
+  const resolved = resolveChain(chain);
+  if (!resolved || getChainKind4(resolved) !== "evm") return null;
+  const chainStr = chain;
+  const rawTxs = env.transactions;
+  if (!Array.isArray(rawTxs) || rawTxs.length === 0) return null;
+  const legs = [];
+  for (const raw of rawTxs) {
+    const legObj = asRecord(raw);
+    if (!legObj) return null;
+    if (legObj.status === "error" || "error" in legObj) return null;
+    const leg = extractLeg(legObj);
+    if (!leg) return null;
+    legs.push(leg);
+  }
+  if (legs.length > 2) return null;
+  const action = typeof env.action === "string" && env.action !== "" ? env.action : void 0;
+  if (legs.length === 2) {
+    const [approveLeg, mainLeg] = legs;
+    return {
+      __buildTx: true,
+      chain: chainStr,
+      ...action ? { action } : {},
+      approvalTxArgs: { chain: chainStr, tx: approveLeg },
+      txArgs: { chain: chainStr, tx: mainLeg }
+    };
+  }
+  return { __buildTx: true, chain: chainStr, ...action ? { action } : {}, tx: legs[0] };
+}
 function deriveToolOutputCandidate(toolName, output) {
   if (CLI_SIGNABLE_FLAT_TOOLS.has(toolName)) {
     const payload = buildTxReadyFromToolOutput(toolName, output);
     return payload ? { payload, source: "flat", toolName } : null;
   }
+  if (CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) {
+    const payload = buildTxReadyFromYieldOutput(toolName, output);
+    return payload ? { payload, source: "yield", toolName } : null;
+  }
   if (CLI_SIGNABLE_PREP_TOOLS.has(toolName)) {
     const env = asRecord(output);
     if (!env || env.status === "error" || "error" in env) return null;
@@ -12713,7 +12762,8 @@ var AgentClient = class {
   maybeSignToolOutput(status, toolName, output, callbacks, v1Type) {
     if (v1Type === "tool-output-error") return;
     if (status !== "done" || !toolName || !callbacks.onToolOutputTx) return;
-    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName)) return;
+    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName) && !CLI_SIGNABLE_YIELD_TOOLS.has(toolName))
+      return;
     const candidate = deriveToolOutputCandidate(toolName, output);
     if (!candidate) return;
     if (this.verbose)
@@ -15082,7 +15132,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.21.1";
+    cachedVersion = "2.22.0";
     return cachedVersion;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.21.1",
+  "version": "2.22.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -74,9 +74,9 @@
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
     "@vultisig/client-shared": "^0.3.0",
-    "@vultisig/core-chain": "^2.28.0",
-    "@vultisig/rujira": "^54.0.0",
-    "@vultisig/sdk": "^2.21.1",
+    "@vultisig/core-chain": "^2.29.0",
+    "@vultisig/rujira": "^55.0.0",
+    "@vultisig/sdk": "^2.22.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",