@vultisig/cli 2.21.1 → 2.23.0

package/dist/index.js

@@ -1687,7 +1687,7 @@ function createHasher(hashCons) {
   hashC.create = () => hashCons();
   return hashC;
 }
-function randomBytes3(bytesLength = 32) {
+function randomBytes2(bytesLength = 32) {
   if (crypto2 && typeof crypto2.getRandomValues === "function") {
     return crypto2.getRandomValues(new Uint8Array(bytesLength));
   }
@@ -4467,7 +4467,7 @@ function getHash(hash) {
   return {
     hash,
     hmac: (key, ...msgs) => hmac(hash, key, concatBytes(...msgs)),
-    randomBytes: randomBytes3
+    randomBytes: randomBytes2
   };
 }
 function createCurve(curveDef, defHash) {
@@ -4700,7 +4700,7 @@ function challenge(...args) {
 function schnorrGetPublicKey(privateKey) {
   return schnorrGetExtPubKey(privateKey).bytes;
 }
-function schnorrSign(message, privateKey, auxRand = randomBytes3(32)) {
+function schnorrSign(message, privateKey, auxRand = randomBytes2(32)) {
   const m = ensureBytes("message", message);
   const { bytes: px, scalar: d } = schnorrGetExtPubKey(privateKey);
   const a = ensureBytes("auxRand", auxRand, 32);
@@ -5121,7 +5121,15 @@ var EVM_PERMANENT_BROADCAST_INPUT_RE = /failed to decode signed transaction|coul
 var UTXO_PERMANENT_BROADCAST_INPUT_RE = /\bTX decode failed\b/i;
 var SOLANA_PERMANENT_BROADCAST_INPUT_RE = /failed to deserialize(?: transaction)?|failed to sanitize|(?:transaction )?signature verification (?:failed|failure)|non-base58 character|invalid base58/i;
 var SUI_REQUIRED_FIELDS_GUARD_RE = /Sui broadcast requires JSON with "unsignedTx" and "signature" fields/i;
-var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction (?:data|bytes)/i;
+var SUI_PERMANENT_GRPC_STATUS = "INVALID_ARGUMENT";
+var SUI_PERMANENT_EXECUTION_MESSAGE_RE = /invalid (?:user )?signature|signature verification (?:failed|failure)|malformed transaction|invalid transaction(?: (?:data|bytes))?\b/i;
+var decodeRpcDetails = (details) => {
+  try {
+    return decodeURIComponent(details);
+  } catch {
+    return details;
+  }
+};
 var COSMOS_PERMANENT_SDK_CODES = {
   2: /tx parse error/i,
   4: /unauthorized|signature verification failed/i,
@@ -5151,7 +5159,8 @@ var permanentBroadcastInputClassifiers = {
   sui: (err, details) => {
     if (SUI_REQUIRED_FIELDS_GUARD_RE.test(details)) return true;
     const rpcCode = err.originalError?.code;
-    return rpcCode === -32002 && SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details);
+    if (rpcCode !== SUI_PERMANENT_GRPC_STATUS) return false;
+    return SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(details) || SUI_PERMANENT_EXECUTION_MESSAGE_RE.test(decodeRpcDetails(details));
   },
   cosmos: (_err, details) => isCosmosPermanentBroadcastInput(details)
 };
@@ -8881,1332 +8890,1479 @@ Please specify more characters of the vault ID.`
   throw new Error(`Vault not found: "${idOrName}"`);
 }
 
-// src/commands/swap.ts
-async function executeSwapChains(ctx2) {
-  const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner("Loading supported swap chains...");
-  const chains = await vault.getSupportedSwapChains();
-  spinner.succeed("Swap chains loaded");
-  if (isJsonOutput()) {
-    outputJson({ swapChains: [...chains] });
-    return chains;
-  }
-  displaySwapChains(chains);
-  return chains;
-}
-async function executeSwapQuote(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  const isMax = options.amount === "max";
-  if (!isMax && (isNaN(options.amount) || options.amount <= 0)) {
-    throw new Error("Invalid amount");
-  }
-  const spinner = createSpinner("Getting swap quote...");
-  const result = await vault.swap({
-    fromChain: options.fromChain,
-    fromSymbol: options.fromToken || "",
-    toChain: options.toChain,
-    toSymbol: options.toToken || "",
-    amount: isMax ? "max" : String(options.amount),
-    dryRun: true
-  });
-  if (!result.dryRun) throw new Error("unreachable");
-  spinner.succeed("Quote received");
-  const quote = result.quote;
-  const fromAmountDisplay = isMax ? `${formatBigintAmount(quote.maxSwapable, quote.fromCoin.decimals)} (max)` : String(options.amount);
-  if (isJsonOutput()) {
-    outputJson({
-      fromChain: options.fromChain,
-      toChain: options.toChain,
-      amount: isMax ? "max" : options.amount,
-      isMax,
-      quote
-    });
-    return quote;
-  }
-  const feeBalance = await vault.balance(options.fromChain);
-  const discountTier = await vault.getDiscountTier();
-  displaySwapPreview(quote, fromAmountDisplay, quote.fromCoin.ticker, quote.toCoin.ticker, {
-    fromDecimals: quote.fromCoin.decimals,
-    toDecimals: quote.toCoin.decimals,
-    feeDecimals: feeBalance.decimals,
-    feeSymbol: feeBalance.symbol,
-    discountTier
-  });
-  info('\nTo execute this swap, use the "swap" command');
-  return quote;
-}
-function validateSwapAmount(amount) {
-  if (amount === "max") return;
-  if (isNaN(amount) || amount <= 0) throw new Error("Invalid amount");
-}
-function getSwapAmountString(amount) {
-  return amount === "max" ? "max" : String(amount);
-}
-function toSwapRequest(options, amount, dryRun) {
-  return {
-    fromChain: options.fromChain,
-    fromSymbol: options.fromToken || "",
-    toChain: options.toChain,
-    toSymbol: options.toToken || "",
-    amount,
-    ...options.slippage !== void 0 && { slippageTolerance: options.slippage },
-    ...dryRun && { dryRun: true }
-  };
-}
-function toDryRunResult(options, quote, fromAmountRaw) {
-  const result = {
-    dryRun: true,
-    fromChain: String(options.fromChain),
-    fromToken: quote.fromCoin.ticker,
-    toChain: String(options.toChain),
-    toToken: quote.toCoin.ticker,
-    inputAmount: fromAmountRaw,
-    ...options.amount === "max" && { isMax: true },
-    estimatedOutput: formatBigintAmount(quote.estimatedOutput, quote.toCoin.decimals),
-    provider: quote.provider
-  };
-  if (quote.estimatedOutputFiat != null) result.estimatedOutputFiat = parseFloat(quote.estimatedOutputFiat.toFixed(2));
-  if (quote.requiresApproval) result.requiresApproval = true;
-  if (quote.warnings?.length) result.warnings = [...quote.warnings];
-  return result;
+// ../../node_modules/viem/_esm/accounts/utils/publicKeyToAddress.js
+init_getAddress();
+init_keccak256();
+function publicKeyToAddress(publicKey) {
+  const address = keccak256(`0x${publicKey.substring(4)}`).substring(26);
+  return checksumAddress(`0x${address}`);
 }
-function displayDryRunResult(result) {
-  info(`
-Dry-run preview:`);
-  info(`  From:             ${result.inputAmount} ${result.fromToken} (${result.fromChain})`);
-  info(`  To:               ${result.estimatedOutput} ${result.toToken} (${result.toChain})`);
-  info(`  Provider:         ${result.provider}`);
-  if (result.estimatedOutputFiat != null) info(`  Est. value (USD): $${result.estimatedOutputFiat}`);
-  if (result.requiresApproval) info(`  Requires approval: yes`);
-  if (result.warnings?.length) result.warnings.forEach((w) => warn(`  Warning: ${w}`));
+
+// ../../node_modules/viem/_esm/utils/signature/recoverPublicKey.js
+init_isHex();
+init_size();
+init_fromHex();
+init_toHex();
+async function recoverPublicKey({ hash, signature }) {
+  const hashHex = isHex(hash) ? hash : toHex(hash);
+  const { secp256k1: secp256k12 } = await Promise.resolve().then(() => (init_secp256k1(), secp256k1_exports));
+  const signature_ = (() => {
+    if (typeof signature === "object" && "r" in signature && "s" in signature) {
+      const { r, s, v, yParity } = signature;
+      const yParityOrV2 = Number(yParity ?? v);
+      const recoveryBit2 = toRecoveryBit(yParityOrV2);
+      return new secp256k12.Signature(hexToBigInt(r), hexToBigInt(s)).addRecoveryBit(recoveryBit2);
+    }
+    const signatureHex = isHex(signature) ? signature : toHex(signature);
+    if (size(signatureHex) !== 65)
+      throw new Error("invalid signature length");
+    const yParityOrV = hexToNumber(`0x${signatureHex.slice(130)}`);
+    const recoveryBit = toRecoveryBit(yParityOrV);
+    return secp256k12.Signature.fromCompact(signatureHex.substring(2, 130)).addRecoveryBit(recoveryBit);
+  })();
+  const publicKey = signature_.recoverPublicKey(hashHex.substring(2)).toHex(false);
+  return `0x${publicKey}`;
 }
-function refuseSwapWhenNonInteractive() {
-  throw new ConfirmationRequiredError(
-    "Swap requires confirmation.",
-    "Pass --yes to confirm, or --dry-run to preview without signing."
-  );
+function toRecoveryBit(yParityOrV) {
+  if (yParityOrV === 0 || yParityOrV === 1)
+    return yParityOrV;
+  if (yParityOrV === 27)
+    return 0;
+  if (yParityOrV === 28)
+    return 1;
+  throw new Error("Invalid yParityOrV value");
 }
-async function confirmSwapIfNeeded(options) {
-  if (options.yes) return;
-  if (isNonInteractive()) {
-    refuseSwapWhenNonInteractive();
-  }
-  const confirmed = await confirmSwap();
-  if (!confirmed) {
-    throw new ConfirmationRequiredError("Swap declined at the confirmation prompt");
-  }
+
+// ../../node_modules/viem/_esm/utils/signature/recoverAddress.js
+async function recoverAddress({ hash, signature }) {
+  return publicKeyToAddress(await recoverPublicKey({ hash, signature }));
 }
-async function executeSwap(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  validateSwapAmount(options.amount);
-  const amountStr = getSwapAmountString(options.amount);
-  if (!options.dryRun && !options.yes && isNonInteractive()) {
-    refuseSwapWhenNonInteractive();
-  }
-  const quoteSpinner = createSpinner("Getting swap quote...");
-  const dryResult = await vault.swap(toSwapRequest(options, amountStr, true));
-  if (!dryResult.dryRun) throw new Error("unreachable");
-  quoteSpinner.succeed("Quote received");
-  const quote = dryResult.quote;
-  const fromAmountRaw = options.amount === "max" ? formatBigintAmount(quote.maxSwapable, quote.fromCoin.decimals) : String(options.amount);
-  const fromAmountDisplay = options.amount === "max" ? `${fromAmountRaw} (max)` : fromAmountRaw;
-  if (options.dryRun) {
-    const result = toDryRunResult(options, quote, fromAmountRaw);
-    if (isJsonOutput()) {
-      outputJson(result);
-    } else {
-      displayDryRunResult(result);
-    }
-    return result;
+
+// ../../node_modules/viem/_esm/utils/signature/hashTypedData.js
+init_encodeAbiParameters();
+init_concat();
+init_toHex();
+init_keccak256();
+
+// ../../node_modules/viem/_esm/utils/typedData.js
+init_abi();
+init_address();
+
+// ../../node_modules/viem/_esm/errors/typedData.js
+init_stringify();
+init_base();
+var InvalidDomainError = class extends BaseError {
+  constructor({ domain }) {
+    super(`Invalid domain "${stringify(domain)}".`, {
+      metaMessages: ["Must be a valid EIP-712 domain."]
+    });
   }
-  const feeBalance = await vault.balance(options.fromChain);
-  const discountTier = await vault.getDiscountTier();
-  if (!isJsonOutput()) {
-    displaySwapPreview(quote, fromAmountDisplay, quote.fromCoin.ticker, quote.toCoin.ticker, {
-      fromDecimals: quote.fromCoin.decimals,
-      toDecimals: quote.toCoin.decimals,
-      feeDecimals: feeBalance.decimals,
-      feeSymbol: feeBalance.symbol,
-      discountTier
+};
+var InvalidPrimaryTypeError = class extends BaseError {
+  constructor({ primaryType, types }) {
+    super(`Invalid primary type \`${primaryType}\` must be one of \`${JSON.stringify(Object.keys(types))}\`.`, {
+      docsPath: "/api/glossary/Errors#typeddatainvalidprimarytypeerror",
+      metaMessages: ["Check that the primary type is a key in `types`."]
     });
   }
-  await confirmSwapIfNeeded(options);
-  await ensureVaultUnlocked(vault, options.password);
-  const intent = buildSwapBroadcastIntent(vault, {
-    fromChain: options.fromChain,
-    toChain: options.toChain,
-    fromToken: options.fromToken,
-    toToken: options.toToken,
-    amount: fromAmountRaw,
-    isMax: options.amount === "max"
-  });
-  let signSpinner;
-  try {
-    const broadcast = await guardedBroadcast(intent, options.force ?? false, async () => {
-      signSpinner = createSpinner("Signing swap transaction...");
-      vault.on("signingProgress", ({ step }) => {
-        if (signSpinner) signSpinner.text = `${step.message} (${step.progress}%)`;
-      });
-      const result = await vault.swap(toSwapRequest(options, amountStr));
-      if (result.dryRun) throw new Error("unreachable");
-      return result;
+};
+var InvalidStructTypeError = class extends BaseError {
+  constructor({ type }) {
+    super(`Struct type "${type}" is invalid.`, {
+      metaMessages: ["Struct type must not be a Solidity type."],
+      name: "InvalidStructTypeError"
     });
-    signSpinner?.succeed(`Swap broadcast: ${broadcast.txHash}`);
-    if (isJsonOutput()) {
-      outputJson({
-        txHash: broadcast.txHash,
-        fromChain: options.fromChain,
-        toChain: options.toChain,
-        quote
-      });
-    } else {
-      displaySwapResult(options.fromChain, options.toChain, broadcast.txHash, quote, quote.toCoin.decimals);
-    }
-    return { txHash: broadcast.txHash, quote };
-  } catch (err) {
-    signSpinner?.stop();
-    throw err;
-  } finally {
-    vault.removeAllListeners("signingProgress");
   }
-}
+};
 
-// src/commands/settings.ts
-import { Chain as Chain9, fiatCurrencies as fiatCurrencies2, fiatCurrencyNameRecord as fiatCurrencyNameRecord3 } from "@vultisig/sdk";
-import chalk6 from "chalk";
-async function executeCurrency(ctx2, newCurrency) {
-  const vault = await ctx2.ensureActiveVault();
-  if (!newCurrency) {
-    const currentCurrency = vault.currency;
-    const currencyName2 = fiatCurrencyNameRecord3[currentCurrency];
-    printResult(chalk6.cyan("\nCurrent Currency Preference:"));
-    printResult(`  ${chalk6.green(currentCurrency.toUpperCase())} - ${currencyName2}`);
-    info(chalk6.gray(`
-Supported currencies: ${fiatCurrencies2.join(", ")}`));
-    info(chalk6.gray('Use "vultisig currency <code>" to change'));
-    return currentCurrency;
-  }
-  const currency = newCurrency.toLowerCase();
-  if (!fiatCurrencies2.includes(currency)) {
-    error(`x Invalid currency: ${newCurrency}`);
-    warn(`Supported currencies: ${fiatCurrencies2.join(", ")}`);
-    throw new Error("Invalid currency");
+// ../../node_modules/viem/_esm/utils/typedData.js
+init_isAddress();
+init_size();
+init_toHex();
+init_regex();
+function validateTypedData(parameters) {
+  const { domain, message, primaryType, types } = parameters;
+  const validateData = (struct, data) => {
+    for (const param of struct) {
+      const { name, type } = param;
+      const value = data[name];
+      const integerMatch = type.match(integerRegex);
+      if (integerMatch && (typeof value === "number" || typeof value === "bigint")) {
+        const [_type, base, size_] = integerMatch;
+        numberToHex(value, {
+          signed: base === "int",
+          size: Number.parseInt(size_, 10) / 8
+        });
+      }
+      if (type === "address" && typeof value === "string" && !isAddress(value))
+        throw new InvalidAddressError2({ address: value });
+      const bytesMatch = type.match(bytesRegex);
+      if (bytesMatch) {
+        const [_type, size_] = bytesMatch;
+        if (size_ && size(value) !== Number.parseInt(size_, 10))
+          throw new BytesSizeMismatchError({
+            expectedSize: Number.parseInt(size_, 10),
+            givenSize: size(value)
+          });
+      }
+      const struct2 = types[type];
+      if (struct2) {
+        validateReference(type);
+        validateData(struct2, value);
+      }
+    }
+  };
+  if (types.EIP712Domain && domain) {
+    if (typeof domain !== "object")
+      throw new InvalidDomainError({ domain });
+    validateData(types.EIP712Domain, domain);
   }
-  const spinner = createSpinner("Updating currency preference...");
-  await vault.setCurrency(currency);
-  spinner.succeed("Currency updated");
-  const currencyName = fiatCurrencyNameRecord3[currency];
-  if (isJsonOutput()) {
-    outputJson({ currency, name: currencyName, updated: true });
-    return currency;
+  if (primaryType !== "EIP712Domain") {
+    if (types[primaryType])
+      validateData(types[primaryType], message);
+    else
+      throw new InvalidPrimaryTypeError({ primaryType, types });
   }
-  success(`
-+ Currency preference set to ${currency.toUpperCase()} (${currencyName})`);
-  return currency;
 }
-async function executeServer(ctx2) {
-  const spinner = createSpinner("Checking server status...");
-  try {
-    const status = await ctx2.sdk.getServerStatus();
-    spinner.succeed("Server status retrieved");
-    if (isJsonOutput()) {
-      outputJson({ server: status });
-      return status;
-    }
-    printResult(chalk6.cyan("\nServer Status:\n"));
-    printResult(chalk6.bold("Fast Vault Server:"));
-    printResult(`  Online:   ${status.fastVault.online ? chalk6.green("Yes") : chalk6.red("No")}`);
-    if (status.fastVault.latency) {
-      printResult(`  Latency:  ${status.fastVault.latency}ms`);
-    }
-    printResult(chalk6.bold("\nMessage Relay:"));
-    printResult(`  Online:   ${status.messageRelay.online ? chalk6.green("Yes") : chalk6.red("No")}`);
-    if (status.messageRelay.latency) {
-      printResult(`  Latency:  ${status.messageRelay.latency}ms`);
-    }
-    return status;
-  } catch (err) {
-    spinner.fail("Failed to check server status");
-    error(`
-x ${err.message}`);
-    throw err;
-  }
+function getTypesForEIP712Domain({ domain }) {
+  return [
+    typeof domain?.name === "string" && { name: "name", type: "string" },
+    domain?.version && { name: "version", type: "string" },
+    (typeof domain?.chainId === "number" || typeof domain?.chainId === "bigint") && {
+      name: "chainId",
+      type: "uint256"
+    },
+    domain?.verifyingContract && {
+      name: "verifyingContract",
+      type: "address"
+    },
+    domain?.salt && { name: "salt", type: "bytes32" }
+  ].filter(Boolean);
 }
-async function executeAddressBook(ctx2, options = {}) {
-  if (options.add) {
-    let chain = options.chain;
-    let address = options.address;
-    let name = options.name;
-    const prompts = [];
-    if (!chain) {
-      prompts.push({
-        type: "select",
-        name: "chain",
-        message: "Select chain:",
-        choices: Object.values(Chain9)
-      });
-    }
-    if (!address) {
-      prompts.push({
-        type: "input",
-        name: "address",
-        message: "Enter address:",
-        validate: (input) => input.trim() !== "" || "Address is required"
-      });
-    }
-    if (!name) {
-      prompts.push({
-        type: "input",
-        name: "name",
-        message: "Enter name/label:",
-        validate: (input) => input.trim() !== "" || "Name is required"
-      });
-    }
-    if (prompts.length > 0) {
-      const answers = await prompt(prompts);
-      chain = chain || answers.chain;
-      address = address || answers.address?.trim();
-      name = name || answers.name?.trim();
-    }
-    const spinner2 = createSpinner("Adding address to address book...");
-    const entry = {
-      chain,
-      address,
-      name,
-      source: "saved",
-      dateAdded: Date.now()
-    };
-    await ctx2.sdk.addAddressBookEntry([entry]);
-    spinner2.succeed("Address added");
-    if (isJsonOutput()) {
-      outputJson({ added: entry });
-      return [];
-    }
-    success(`
-+ Added ${name} (${chain}: ${address})`);
-    return [];
-  }
-  if (options.remove) {
-    const spinner2 = createSpinner("Removing address from address book...");
-    await ctx2.sdk.removeAddressBookEntry([{ address: options.remove, chain: options.chain }]);
-    spinner2.succeed("Address removed");
-    if (isJsonOutput()) {
-      outputJson({ removed: { address: options.remove, chain: options.chain } });
-      return [];
-    }
-    success(`
-+ Removed ${options.remove}`);
-    return [];
-  }
-  const spinner = createSpinner("Loading address book...");
-  const addressBook = await ctx2.sdk.getAddressBook(options.chain);
-  spinner.succeed("Address book loaded");
-  const allEntries = [...addressBook.saved, ...addressBook.vaults];
-  if (isJsonOutput()) {
-    outputJson({ addressBook: allEntries, chain: options.chain });
-    return allEntries;
-  }
-  if (allEntries.length === 0) {
-    warn(`
-No addresses in address book${options.chain ? ` for ${options.chain}` : ""}`);
-    info(chalk6.gray("\nUse --add to add an address to the address book"));
-  } else {
-    printResult(chalk6.cyan(`
-Address Book${options.chain ? ` (${options.chain})` : ""}:
-`));
-    const table = allEntries.map((entry) => ({
-      Name: entry.name,
-      Chain: entry.chain,
-      Address: entry.address,
-      Source: entry.source
-    }));
-    printTable(table);
-    info(chalk6.gray("\nUse --add to add or --remove <address> to remove an address"));
-  }
-  return allEntries;
+function validateReference(type) {
+  if (type === "address" || type === "bool" || type === "string" || type.startsWith("bytes") || type.startsWith("uint") || type.startsWith("int"))
+    throw new InvalidStructTypeError({ type });
 }
 
-// src/commands/rujira.ts
-import {
-  getRoutesSummary,
-  listEasyRoutes,
-  RujiraClient,
-  VultisigRujiraProvider
-} from "@vultisig/rujira";
-async function createRujiraClient(ctx2, options = {}) {
-  const vault = await ctx2.ensureActiveVault();
-  const provider = new VultisigRujiraProvider(vault);
-  const client = new RujiraClient({
-    signer: provider,
-    rpcEndpoint: options.rpcEndpoint,
-    config: {
-      // Allow overriding rest endpoint via config (used for thornode calls)
-      ...options.restEndpoint ? { restEndpoint: options.restEndpoint } : {}
-    }
+// ../../node_modules/viem/_esm/utils/signature/hashTypedData.js
+function hashTypedData(parameters) {
+  const { domain = {}, message, primaryType } = parameters;
+  const types = {
+    EIP712Domain: getTypesForEIP712Domain({ domain }),
+    ...parameters.types
+  };
+  validateTypedData({
+    domain,
+    message,
+    primaryType,
+    types
   });
-  const spinner = createSpinner("Connecting to Rujira/THORChain...");
-  await client.connect();
-  spinner.succeed("Connected");
-  return client;
+  const parts = ["0x1901"];
+  if (domain)
+    parts.push(hashDomain({
+      domain,
+      types
+    }));
+  if (primaryType !== "EIP712Domain")
+    parts.push(hashStruct({
+      data: message,
+      primaryType,
+      types
+    }));
+  return keccak256(concat(parts));
 }
-async function executeRujiraBalance(ctx2, options = {}) {
-  const vault = await ctx2.ensureActiveVault();
-  const thorAddress = await vault.address("THORChain");
-  const client = await createRujiraClient(ctx2, options);
-  const spinner = createSpinner("Loading THORChain balances...");
-  const balances = await client.deposit.getBalances(thorAddress);
-  spinner.succeed("Balances loaded");
-  const filtered = options.securedOnly ? balances.filter((b) => b.denom.includes("-") || b.denom.includes("/")) : balances;
-  if (isJsonOutput()) {
-    outputJson({ thorAddress, balances: filtered });
-    return;
-  }
-  info(`THORChain address: ${thorAddress}`);
-  if (!filtered.length) {
-    printResult("No balances found");
-    return;
+function hashDomain({ domain, types }) {
+  return hashStruct({
+    data: domain,
+    primaryType: "EIP712Domain",
+    types
+  });
+}
+function hashStruct({ data, primaryType, types }) {
+  const encoded = encodeData({
+    data,
+    primaryType,
+    types
+  });
+  return keccak256(encoded);
+}
+function encodeData({ data, primaryType, types }) {
+  const encodedTypes = [{ type: "bytes32" }];
+  const encodedValues = [hashType({ primaryType, types })];
+  for (const field of types[primaryType]) {
+    const [type, value] = encodeField({
+      types,
+      name: field.name,
+      type: field.type,
+      value: data[field.name]
+    });
+    encodedTypes.push(type);
+    encodedValues.push(value);
   }
-  printTable(
-    filtered.map((b) => ({
-      asset: b.asset,
-      denom: b.denom,
-      amount: b.formatted,
-      raw: b.amount
-    }))
-  );
+  return encodeAbiParameters(encodedTypes, encodedValues);
 }
-async function executeRujiraRoutes() {
-  const routes = listEasyRoutes();
-  const summary = getRoutesSummary();
-  if (isJsonOutput()) {
-    outputJson({ routes, summary });
-    return;
+function hashType({ primaryType, types }) {
+  const encodedHashType = toHex(encodeType({ primaryType, types }));
+  return keccak256(encodedHashType);
+}
+function encodeType({ primaryType, types }) {
+  let result = "";
+  const unsortedDeps = findTypeDependencies({ primaryType, types });
+  unsortedDeps.delete(primaryType);
+  const deps = [primaryType, ...Array.from(unsortedDeps).sort()];
+  for (const type of deps) {
+    result += `${type}(${types[type].map(({ name, type: t }) => `${t} ${name}`).join(",")})`;
   }
-  printResult(summary);
-  printResult("");
-  printTable(
-    routes.map((r) => ({
-      name: r.name,
-      from: r.from,
-      to: r.to,
-      liquidity: r.liquidity,
-      description: r.description
-    }))
-  );
+  return result;
 }
-async function executeRujiraDeposit(ctx2, options = {}) {
-  const vault = await ctx2.ensureActiveVault();
-  const thorAddress = await vault.address("THORChain");
-  const client = await createRujiraClient(ctx2, options);
-  if (!options.asset) {
-    const spinner2 = createSpinner("Loading THORChain inbound addresses...");
-    const inbound = await client.deposit.getInboundAddresses();
-    spinner2.succeed("Inbound addresses loaded");
-    if (isJsonOutput()) {
-      outputJson({ thorAddress, inboundAddresses: inbound });
-      return;
-    }
-    info(`THORChain address: ${thorAddress}`);
-    printResult("Provide an L1 asset to get a chain-specific inbound address + memo.");
-    printResult("Example: vultisig rujira deposit --asset BTC.BTC --amount 100000");
-    printResult("");
-    printTable(
-      inbound.map((a) => ({
-        chain: a.chain,
-        address: a.address,
-        halted: a.halted,
-        globalTradingPaused: a.global_trading_paused,
-        chainTradingPaused: a.chain_trading_paused
-      }))
-    );
-    return;
+function findTypeDependencies({ primaryType: primaryType_, types }, results = /* @__PURE__ */ new Set()) {
+  const match = primaryType_.match(/^\w*/u);
+  const primaryType = match?.[0];
+  if (results.has(primaryType) || types[primaryType] === void 0) {
+    return results;
   }
-  const amount = options.amount ?? "1";
-  const spinner = createSpinner("Preparing deposit instructions...");
-  const prepared = await client.deposit.prepare({
-    fromAsset: options.asset,
-    amount,
-    thorAddress,
-    affiliate: options.affiliate,
-    affiliateBps: options.affiliateBps
-  });
-  spinner.succeed("Deposit prepared");
-  if (isJsonOutput()) {
-    outputJson({ thorAddress, deposit: prepared });
-    return;
+  results.add(primaryType);
+  for (const field of types[primaryType]) {
+    findTypeDependencies({ primaryType: field.type, types }, results);
   }
-  info(`THORChain address: ${thorAddress}`);
-  printResult("Deposit instructions (send from L1):");
-  printResult(`  Chain:          ${prepared.chain}`);
-  printResult(`  Asset:          ${prepared.asset}`);
-  printResult(`  Inbound address:${prepared.inboundAddress}`);
-  printResult(`  Memo:           ${prepared.memo}`);
-  printResult(`  Min amount:     ${prepared.minimumAmount}`);
-  if (prepared.warning) {
-    warn(prepared.warning);
+  return results;
+}
+function encodeField({ types, name, type, value }) {
+  if (types[type] !== void 0) {
+    return [
+      { type: "bytes32" },
+      keccak256(encodeData({ data: value, primaryType: type, types }))
+    ];
+  }
+  if (type === "bytes")
+    return [{ type: "bytes32" }, keccak256(value)];
+  if (type === "string")
+    return [{ type: "bytes32" }, keccak256(toHex(value))];
+  if (type.lastIndexOf("]") === type.length - 1) {
+    const parsedType = type.slice(0, type.lastIndexOf("["));
+    const typeValuePairs = value.map((item) => encodeField({
+      name,
+      type: parsedType,
+      types,
+      value: item
+    }));
+    return [
+      { type: "bytes32" },
+      keccak256(encodeAbiParameters(typeValuePairs.map(([t]) => t), typeValuePairs.map(([, v]) => v)))
+    ];
   }
+  return [{ type }, value];
 }
-async function executeRujiraSwap(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  if (!options.dryRun && !options.yes && isNonInteractive()) {
-    throw new ConfirmationRequiredError(
-      "Swap requires confirmation.",
-      "Pass --yes to confirm, or --dry-run to preview."
-    );
+
+// ../../node_modules/viem/_esm/errors/unit.js
+init_base();
+var InvalidDecimalNumberError = class extends BaseError {
+  constructor({ value }) {
+    super(`Number \`${value}\` is not a valid decimal number.`, {
+      name: "InvalidDecimalNumberError"
+    });
   }
-  const client = await createRujiraClient(ctx2, options);
-  const destination = options.destination ?? await vault.address("THORChain");
-  const quoteSpinner = createSpinner("Getting FIN swap quote...");
-  const quote = await client.swap.getQuote({
-    fromAsset: options.fromAsset,
-    toAsset: options.toAsset,
-    amount: options.amount,
-    destination,
-    slippageBps: options.slippageBps
-  });
-  quoteSpinner.succeed("Quote received");
-  if (options.dryRun) {
-    if (isJsonOutput()) {
-      outputJson({ dryRun: true, quote });
-    } else {
-      printResult("FIN Swap Preview (dry-run)");
-      printResult(`  From:        ${options.fromAsset}`);
-      printResult(`  To:          ${options.toAsset}`);
-      printResult(`  Amount (in): ${options.amount}`);
-      printResult(`  Expected out:${quote.expectedOutput}`);
-      printResult(`  Min out:     ${quote.minimumOutput}`);
-      printResult(`  Contract:    ${quote.contractAddress}`);
+};
+
+// ../../node_modules/viem/_esm/utils/unit/parseUnits.js
+function parseUnits(value, decimals) {
+  if (!/^(-?)([0-9]*)\.?([0-9]*)$/.test(value))
+    throw new InvalidDecimalNumberError({ value });
+  let [integer, fraction = "0"] = value.split(".");
+  const negative = integer.startsWith("-");
+  if (negative)
+    integer = integer.slice(1);
+  fraction = fraction.replace(/(0+)$/, "");
+  if (decimals === 0) {
+    if (Math.round(Number(`.${fraction}`)) === 1)
+      integer = `${BigInt(integer) + 1n}`;
+    fraction = "";
+  } else if (fraction.length > decimals) {
+    const [left, unit, right] = [
+      fraction.slice(0, decimals - 1),
+      fraction.slice(decimals - 1, decimals),
+      fraction.slice(decimals)
+    ];
+    const rounded = Math.round(Number(`${unit}.${right}`));
+    if (rounded > 9)
+      fraction = `${BigInt(left) + BigInt(1)}0`.padStart(left.length + 1, "0");
+    else
+      fraction = `${left}${rounded}`;
+    if (fraction.length > decimals) {
+      fraction = fraction.slice(1);
+      integer = `${BigInt(integer) + 1n}`;
     }
-    return;
+    fraction = fraction.slice(0, decimals);
+  } else {
+    fraction = fraction.padEnd(decimals, "0");
   }
-  if (!isJsonOutput()) {
-    printResult("FIN Swap Preview");
-    printResult(`  From:        ${options.fromAsset}`);
-    printResult(`  To:          ${options.toAsset}`);
-    printResult(`  Amount (in): ${options.amount}`);
-    printResult(`  Expected out:${quote.expectedOutput}`);
-    printResult(`  Min out:     ${quote.minimumOutput}`);
-    printResult(`  Contract:    ${quote.contractAddress}`);
-    if (quote.warning) {
-      warn(quote.warning);
-    }
+  return BigInt(`${negative ? "-" : ""}${integer}${fraction}`);
+}
+
+// ../../node_modules/viem/_esm/index.js
+init_formatUnits();
+
+// ../../packages/core/chain/dist/amount/toChainAmount.js
+var ChainAmountParseError = class extends Error {
+  name = "ChainAmountParseError";
+  constructor(message) {
+    super(message);
   }
-  if (!options.yes) {
-    warn("This command will execute a swap. Re-run with -y/--yes to skip this warning.");
-    throw new ConfirmationRequiredError(
-      "Swap requires confirmation.",
-      "Pass --yes to confirm, or --dry-run to preview."
-    );
+};
+var SCIENTIFIC_DECIMAL = /^([+-]?)(?:(\d+)\.?(\d*)|\.(\d+))[eE]([+-]?\d+)$/i;
+var MAX_SCALE_ABS = 10000n;
+var padFractionDigits = (frac, totalLen) => {
+  const need = totalLen - BigInt(frac.length);
+  if (need <= 0n) {
+    return frac;
   }
-  await ensureVaultUnlocked(vault, options.password);
-  const execSpinner = createSpinner("Executing FIN swap...");
-  const result = await client.swap.execute(quote, { slippageBps: options.slippageBps });
-  execSpinner.succeed("Swap submitted");
-  if (isJsonOutput()) {
-    outputJson({ quote, result });
+  if (need <= BigInt(Number.MAX_SAFE_INTEGER)) {
+    return `${"0".repeat(Number(need))}${frac}`;
+  }
+  let out = frac;
+  while (BigInt(out.length) < totalLen) {
+    out = `0${out}`;
+  }
+  return out;
+};
+var expandScientificNotationToDecimalString = (s) => {
+  const m = SCIENTIFIC_DECIMAL.exec(s.trim());
+  if (!m) {
+    throw new ChainAmountParseError(`Invalid amount: "${s}"`);
+  }
+  const signNeg = m[1] === "-";
+  let digitStr;
+  let fracLen;
+  if (m[4] !== void 0) {
+    digitStr = m[4];
+    fracLen = digitStr.length;
   } else {
-    printResult(`Tx Hash: ${result.txHash}`);
+    digitStr = `${m[2] ?? ""}${m[3] ?? ""}`;
+    fracLen = (m[3] ?? "").length;
+  }
+  if (!/^\d+$/.test(digitStr)) {
+    throw new ChainAmountParseError(`Invalid amount: "${s}"`);
+  }
+  const expStr = m[5] ?? "";
+  if (expStr === "" || expStr === "+" || expStr === "-") {
+    throw new ChainAmountParseError(`Invalid amount: "${s}"`);
+  }
+  const allDigits = BigInt(digitStr);
+  const exp = BigInt(expStr);
+  const scale = exp - BigInt(fracLen);
+  const scaleAbs = scale < 0n ? -scale : scale;
+  if (scaleAbs > MAX_SCALE_ABS) {
+    throw new ChainAmountParseError(`Amount exponent out of supported range: "${s}"`);
+  }
+  let absResult;
+  if (scale >= 0n) {
+    const mult = 10n ** scale;
+    absResult = (allDigits * mult).toString();
+  } else {
+    const k = -scale;
+    const divisor = 10n ** k;
+    const intPart = allDigits / divisor;
+    const rem = allDigits % divisor;
+    const frac = padFractionDigits(rem.toString(), k);
+    absResult = intPart === 0n ? `0.${frac}` : `${intPart.toString()}.${frac}`;
   }
-}
-async function executeRujiraWithdraw(ctx2, options) {
-  const vault = await ctx2.ensureActiveVault();
-  if (!options.dryRun && !options.yes && isNonInteractive()) {
-    throw new ConfirmationRequiredError(
-      "Withdrawal requires confirmation.",
-      "Pass --yes to confirm, or --dry-run to preview."
-    );
+  if (signNeg && allDigits !== 0n) {
+    return `-${absResult}`;
   }
-  const client = await createRujiraClient(ctx2, options);
-  const prepSpinner = createSpinner("Preparing withdrawal (MsgDeposit)...");
-  const prepared = await client.withdraw.prepare({
-    asset: options.asset,
-    amount: options.amount,
-    l1Address: options.l1Address,
-    maxFeeBps: options.maxFeeBps
-  });
-  prepSpinner.succeed("Withdrawal prepared");
-  if (options.dryRun) {
-    if (isJsonOutput()) {
-      outputJson({ dryRun: true, prepared });
-    } else {
-      printResult("Withdraw Preview (dry-run)");
-      printResult(`  Asset:       ${prepared.asset}`);
-      printResult(`  Amount:      ${prepared.amount}`);
-      printResult(`  Destination: ${prepared.destination}`);
-      printResult(`  Memo:        ${prepared.memo}`);
-      printResult(`  Est. fee:    ${prepared.estimatedFee}`);
+  return absResult;
+};
+var formatNumberAmount = (amount) => {
+  const str2 = amount.toString();
+  return /[eE]/.test(str2) ? expandScientificNotationToDecimalString(str2) : str2;
+};
+var truncateToDecimals = (s, decimals) => {
+  const dotIdx = s.indexOf(".");
+  if (dotIdx === -1)
+    return s;
+  if (decimals === 0)
+    return s.slice(0, dotIdx);
+  const fracPart = s.slice(dotIdx + 1);
+  if (fracPart.length <= decimals)
+    return s;
+  return `${s.slice(0, dotIdx + 1)}${fracPart.slice(0, decimals)}`;
+};
+var toChainAmount = (amount, decimals) => {
+  if (typeof amount === "string") {
+    const trimmed = amount.trim();
+    if (!trimmed) {
+      throw new ChainAmountParseError("Amount cannot be empty");
     }
-    return;
-  }
-  if (!isJsonOutput()) {
-    printResult("Withdraw Preview");
-    printResult(`  Asset:       ${prepared.asset}`);
-    printResult(`  Amount:      ${prepared.amount}`);
-    printResult(`  Destination: ${prepared.destination}`);
-    printResult(`  Memo:        ${prepared.memo}`);
-    printResult(`  Est. fee:    ${prepared.estimatedFee}`);
+    if (/[eE]/.test(trimmed)) {
+      const expanded = expandScientificNotationToDecimalString(trimmed);
+      return parseUnits(truncateToDecimals(expanded, decimals), decimals);
+    }
+    return parseUnits(truncateToDecimals(trimmed, decimals), decimals);
   }
-  if (!options.yes) {
-    warn("This command will broadcast a THORChain MsgDeposit withdrawal. Re-run with -y/--yes to proceed.");
-    throw new ConfirmationRequiredError(
-      "Withdrawal requires confirmation.",
-      "Pass --yes to confirm, or --dry-run to preview."
-    );
+  return parseUnits(truncateToDecimals(formatNumberAmount(amount), decimals), decimals);
+};
+
+// src/commands/swap.ts
+async function executeSwapChains(ctx2) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner("Loading supported swap chains...");
+  const chains = await vault.getSupportedSwapChains();
+  spinner.succeed("Swap chains loaded");
+  if (isJsonOutput()) {
+    outputJson({ swapChains: [...chains] });
+    return chains;
   }
-  await ensureVaultUnlocked(vault, options.password);
-  const execSpinner = createSpinner("Broadcasting withdrawal...");
-  const result = await client.withdraw.execute(prepared);
-  execSpinner.succeed("Withdrawal submitted");
+  displaySwapChains(chains);
+  return chains;
+}
+async function executeSwapQuote(ctx2, options) {
+  const isMax = options.amount === "max";
+  const amount = normalizeSwapAmount(options.amount);
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner("Getting swap quote...");
+  const result = await vault.swap({
+    fromChain: options.fromChain,
+    fromSymbol: options.fromToken || "",
+    toChain: options.toChain,
+    toSymbol: options.toToken || "",
+    amount,
+    dryRun: true
+  });
+  if (!result.dryRun) throw new Error("unreachable");
+  spinner.succeed("Quote received");
+  const quote = result.quote;
+  const semanticAmount = isMax ? amount : normalizeSwapAmount(amount, quote.fromCoin.decimals);
+  const fromAmountDisplay = isMax ? `${formatBigintAmount(quote.maxSwapable, quote.fromCoin.decimals)} (max)` : semanticAmount;
   if (isJsonOutput()) {
-    outputJson({ prepared, result });
-  } else {
-    printResult(`Tx Hash: ${result.txHash}`);
+    outputJson({
+      fromChain: options.fromChain,
+      toChain: options.toChain,
+      amount: semanticAmount,
+      isMax,
+      quote
+    });
+    return quote;
   }
+  const feeBalance = await vault.balance(options.fromChain);
+  const discountTier = await vault.getDiscountTier();
+  displaySwapPreview(quote, fromAmountDisplay, quote.fromCoin.ticker, quote.toCoin.ticker, {
+    fromDecimals: quote.fromCoin.decimals,
+    toDecimals: quote.toCoin.decimals,
+    feeDecimals: feeBalance.decimals,
+    feeSymbol: feeBalance.symbol,
+    discountTier
+  });
+  info('\nTo execute this swap, use the "swap" command');
+  return quote;
 }
-
-// src/commands/discount.ts
-import {
-  baseAffiliateBps,
-  vultDiscountTierBps,
-  vultDiscountTierMinBalances
-} from "@vultisig/sdk";
-import chalk7 from "chalk";
-var TIER_CONFIG = {
-  none: { bps: baseAffiliateBps, discount: 0 },
-  ...Object.fromEntries(
-    Object.entries(vultDiscountTierMinBalances).map(([tier, minVult]) => [
-      tier,
-      {
-        bps: baseAffiliateBps - vultDiscountTierBps[tier],
-        discount: vultDiscountTierBps[tier],
-        minVult
-      }
-    ])
-  )
-};
-function getTierColor(tier) {
-  const colors = {
-    none: chalk7.gray,
-    bronze: chalk7.hex("#CD7F32"),
-    silver: chalk7.hex("#C0C0C0"),
-    gold: chalk7.hex("#FFD700"),
-    platinum: chalk7.hex("#E5E4E2"),
-    diamond: chalk7.hex("#B9F2FF"),
-    ultimate: chalk7.hex("#FF00FF")
+var SWAP_AMOUNT_CANONICAL_DECIMALS = 1e4;
+function normalizeSwapAmount(amount, decimals = SWAP_AMOUNT_CANONICAL_DECIMALS) {
+  if (amount === "max") return amount;
+  try {
+    const chainAmount = toChainAmount(amount, decimals);
+    if (chainAmount <= 0n) throw new Error("Invalid amount");
+    return formatUnits(chainAmount, decimals);
+  } catch {
+    throw new Error("Invalid amount");
+  }
+}
+function toSwapRequest(options, amount, dryRun) {
+  return {
+    fromChain: options.fromChain,
+    fromSymbol: options.fromToken || "",
+    toChain: options.toChain,
+    toSymbol: options.toToken || "",
+    amount,
+    ...options.slippage !== void 0 && { slippageTolerance: options.slippage },
+    ...dryRun && { dryRun: true }
   };
-  return colors[tier] || chalk7.white;
 }
-function getNextTier(currentTier) {
-  const tierOrder = ["none", "bronze", "silver", "gold", "platinum", "diamond", "ultimate"];
-  const currentIndex = tierOrder.indexOf(currentTier);
-  if (currentIndex === -1 || currentIndex >= tierOrder.length - 1) {
-    return null;
+function toDryRunResult(options, quote, fromAmountRaw) {
+  const result = {
+    dryRun: true,
+    fromChain: String(options.fromChain),
+    fromToken: quote.fromCoin.ticker,
+    toChain: String(options.toChain),
+    toToken: quote.toCoin.ticker,
+    inputAmount: fromAmountRaw,
+    ...options.amount === "max" && { isMax: true },
+    estimatedOutput: formatBigintAmount(quote.estimatedOutput, quote.toCoin.decimals),
+    provider: quote.provider
+  };
+  if (quote.estimatedOutputFiat != null) result.estimatedOutputFiat = parseFloat(quote.estimatedOutputFiat.toFixed(2));
+  if (quote.requiresApproval) result.requiresApproval = true;
+  if (quote.warnings?.length) result.warnings = [...quote.warnings];
+  return result;
+}
+function displayDryRunResult(result) {
+  info(`
+Dry-run preview:`);
+  info(`  From:             ${result.inputAmount} ${result.fromToken} (${result.fromChain})`);
+  info(`  To:               ${result.estimatedOutput} ${result.toToken} (${result.toChain})`);
+  info(`  Provider:         ${result.provider}`);
+  if (result.estimatedOutputFiat != null) info(`  Est. value (USD): $${result.estimatedOutputFiat}`);
+  if (result.requiresApproval) info(`  Requires approval: yes`);
+  if (result.warnings?.length) result.warnings.forEach((w) => warn(`  Warning: ${w}`));
+}
+function refuseSwapWhenNonInteractive() {
+  throw new ConfirmationRequiredError(
+    "Swap requires confirmation.",
+    "Pass --yes to confirm, or --dry-run to preview without signing."
+  );
+}
+async function confirmSwapIfNeeded(options) {
+  if (options.yes) return;
+  if (isNonInteractive()) {
+    refuseSwapWhenNonInteractive();
   }
-  const nextTierName = tierOrder[currentIndex + 1];
-  const config = TIER_CONFIG[nextTierName];
-  if ("minVult" in config) {
-    return { name: nextTierName, vultRequired: config.minVult };
+  const confirmed = await confirmSwap();
+  if (!confirmed) {
+    throw new ConfirmationRequiredError("Swap declined at the confirmation prompt");
   }
-  return null;
 }
-async function executeDiscount(ctx2, options = {}) {
+async function executeSwap(ctx2, options) {
+  const amountStr = normalizeSwapAmount(options.amount);
   const vault = await ctx2.ensureActiveVault();
-  const spinner = createSpinner(options.refresh ? "Refreshing discount tier..." : "Loading discount tier...");
-  const tierResult = options.refresh ? await vault.updateDiscountTier() : await vault.getDiscountTier();
-  const tier = tierResult || "none";
-  const config = TIER_CONFIG[tier];
-  const nextTier = getNextTier(tier);
-  const tierInfo = {
-    tier,
-    feeBps: config.bps,
-    discountBps: config.discount,
-    nextTier
-  };
-  spinner.succeed("Discount tier loaded");
-  if (isJsonOutput()) {
-    outputJson({
-      tier: tierInfo.tier,
-      feeBps: tierInfo.feeBps,
-      discountBps: tierInfo.discountBps,
-      nextTier: tierInfo.nextTier
-    });
-    return tierInfo;
+  if (!options.dryRun && !options.yes && isNonInteractive()) {
+    refuseSwapWhenNonInteractive();
   }
-  displayDiscountTier(tierInfo);
-  return tierInfo;
-}
-function displayDiscountTier(tierInfo) {
-  const tierColor = getTierColor(tierInfo.tier);
-  printResult(chalk7.cyan("\n+----------------------------------------+"));
-  printResult(chalk7.cyan("|          VULT Discount Tier            |"));
-  printResult(chalk7.cyan("+----------------------------------------+\n"));
-  const tierDisplay = tierInfo.tier === "none" ? chalk7.gray("No Tier") : tierColor(tierInfo.tier.charAt(0).toUpperCase() + tierInfo.tier.slice(1));
-  printResult(`  Current Tier:   ${tierDisplay}`);
-  if (tierInfo.tier === "none") {
-    printResult(`  Swap Fee:       ${chalk7.gray("50 bps (0.50%)")}`);
-    printResult(`  Discount:       ${chalk7.gray("None")}`);
-  } else {
-    printResult(`  Swap Fee:       ${chalk7.green(`${tierInfo.feeBps} bps (${(tierInfo.feeBps / 100).toFixed(2)}%)`)}`);
-    printResult(`  Discount:       ${chalk7.green(`${tierInfo.discountBps} bps saved`)}`);
+  const quoteSpinner = createSpinner("Getting swap quote...");
+  const dryResult = await vault.swap(toSwapRequest(options, amountStr, true));
+  if (!dryResult.dryRun) throw new Error("unreachable");
+  quoteSpinner.succeed("Quote received");
+  const quote = dryResult.quote;
+  const semanticAmount = options.amount === "max" ? amountStr : normalizeSwapAmount(amountStr, quote.fromCoin.decimals);
+  const fromAmountRaw = options.amount === "max" ? formatBigintAmount(quote.maxSwapable, quote.fromCoin.decimals) : semanticAmount;
+  const fromAmountDisplay = options.amount === "max" ? `${fromAmountRaw} (max)` : fromAmountRaw;
+  if (options.dryRun) {
+    const result = toDryRunResult(options, quote, fromAmountRaw);
+    if (isJsonOutput()) {
+      outputJson(result);
+    } else {
+      displayDryRunResult(result);
+    }
+    return result;
   }
-  if (tierInfo.nextTier) {
-    const nextTierColor = getTierColor(tierInfo.nextTier.name);
-    printResult(chalk7.bold("\n  Next Tier:"));
-    printResult(
-      `    ${nextTierColor(tierInfo.nextTier.name.charAt(0).toUpperCase() + tierInfo.nextTier.name.slice(1))} - requires ${tierInfo.nextTier.vultRequired.toLocaleString()} VULT`
-    );
-  } else if (tierInfo.tier === "ultimate") {
-    printResult(chalk7.bold("\n  ") + chalk7.magenta("You have the highest tier! 0% swap fees."));
+  const feeBalance = await vault.balance(options.fromChain);
+  const discountTier = await vault.getDiscountTier();
+  if (!isJsonOutput()) {
+    displaySwapPreview(quote, fromAmountDisplay, quote.fromCoin.ticker, quote.toCoin.ticker, {
+      fromDecimals: quote.fromCoin.decimals,
+      toDecimals: quote.toCoin.decimals,
+      feeDecimals: feeBalance.decimals,
+      feeSymbol: feeBalance.symbol,
+      discountTier
+    });
+  }
+  await confirmSwapIfNeeded(options);
+  await ensureVaultUnlocked(vault, options.password);
+  const intent = buildSwapBroadcastIntent(vault, {
+    fromChain: options.fromChain,
+    toChain: options.toChain,
+    fromToken: options.fromToken,
+    toToken: options.toToken,
+    amount: fromAmountRaw,
+    isMax: options.amount === "max"
+  });
+  let signSpinner;
+  try {
+    const broadcast = await guardedBroadcast(intent, options.force ?? false, async () => {
+      signSpinner = createSpinner("Signing swap transaction...");
+      vault.on("signingProgress", ({ step }) => {
+        if (signSpinner) signSpinner.text = `${step.message} (${step.progress}%)`;
+      });
+      const result = await vault.swap(toSwapRequest(options, semanticAmount));
+      if (result.dryRun) throw new Error("unreachable");
+      return result;
+    });
+    signSpinner?.succeed(`Swap broadcast: ${broadcast.txHash}`);
+    if (isJsonOutput()) {
+      outputJson({
+        txHash: broadcast.txHash,
+        fromChain: options.fromChain,
+        toChain: options.toChain,
+        quote
+      });
+    } else {
+      displaySwapResult(options.fromChain, options.toChain, broadcast.txHash, quote, quote.toCoin.decimals);
+    }
+    return { txHash: broadcast.txHash, quote };
+  } catch (err) {
+    signSpinner?.stop();
+    throw err;
+  } finally {
+    vault.removeAllListeners("signingProgress");
   }
-  info(chalk7.gray("\n  Tip: Thorguard NFT holders get +1 tier upgrade (up to gold)"));
-  printResult("");
 }
 
-// src/commands/auth.ts
-import { executeAuthLogout, executeAuthSetup, executeAuthStatus } from "@vultisig/client-shared";
-
-// src/commands/agent.ts
-import chalk10 from "chalk";
-import Table from "cli-table3";
-
-// src/agent/ask.ts
-var AskInterface = class {
-  session;
-  verbose;
-  autoApprove;
-  responseParts = [];
-  toolCalls = [];
-  transactions = [];
-  cards = [];
-  warnings = [];
-  outcome;
-  error;
-  // Tracks whether the currently-latched `error` is a terminal one (e.g. the
-  // depth cap). A terminal error may overwrite a prior non-terminal one; once a
-  // terminal error is recorded, later frames cannot replace it. See onError.
-  errorIsTerminal = false;
-  constructor(session, verbose = false, autoApprove = false) {
-    this.session = session;
-    this.verbose = verbose;
-    this.autoApprove = autoApprove;
-  }
-  /**
-   * Whether the turn threw with a still-unacknowledged broadcast (the F1
-   * ack-failure case). The command's catch uses this to gate the ACK_FAILED
-   * re-tag so a later, unrelated retryable error after an already-acked
-   * broadcast keeps its own (retryable) classification instead of exit 8.
-   */
-  hasUnacknowledgedBroadcast() {
-    return this.session.hasUnacknowledgedBroadcast();
-  }
-  /**
-   * Get UI callbacks that silently collect results.
-   * Tool progress is logged to stderr in verbose mode.
-   */
-  getCallbacks() {
-    return {
-      onTextDelta: (_delta) => {
-      },
-      onToolCall: (_id, action, params) => {
-        if (this.verbose) {
-          const paramStr = params ? ` ${JSON.stringify(params)}` : "";
-          process.stderr.write(`[tool] ${action}${paramStr} ...
-`);
-        }
-      },
-      onToolResult: (id, action, success2, data, error2, code) => {
-        this.toolCalls.push({ id, action, success: success2, data, error: error2, code });
-        if (this.verbose) {
-          const status = success2 ? "ok" : `error: ${error2}${code ? ` [${code}]` : ""}`;
-          process.stderr.write(`[tool] ${action}: ${status}
-`);
-        }
-      },
-      onAssistantMessage: (content) => {
-        if (content) {
-          this.responseParts.push(content);
-        }
-      },
-      onBalanceSummary: (card) => {
-        this.cards.push(card);
-      },
-      onTurnOutcome: (outcome) => {
-        this.outcome = outcome;
-      },
-      onSuggestions: (_suggestions) => {
-      },
-      onTxStatus: (txHash, chain, status, explorerUrl) => {
-        const existing = this.transactions.find((t) => t.hash === txHash);
-        if (existing) {
-          existing.status = status;
-          if (explorerUrl) existing.explorerUrl = explorerUrl;
-        } else {
-          this.transactions.push({ hash: txHash, chain, explorerUrl, status });
-        }
-        if (this.verbose) {
-          process.stderr.write(`[tx] ${chain}: ${txHash} (${status})
-`);
-        }
-      },
-      onError: (message, code) => {
-        const isTerminal2 = isTerminalAgentErrorCode(code);
-        if (!this.error || isTerminal2 && !this.errorIsTerminal) {
-          this.error = { message, code };
-          this.errorIsTerminal = isTerminal2;
-        }
-        process.stderr.write(`[error] ${message} [${code}]
-`);
-      },
-      onProtocolWarning: (warning) => {
-        this.warnings.push(warning);
-        process.stderr.write(`[warning] ${warning.message} [${warning.code}]
-`);
-      },
-      onDone: () => {
-      },
-      requestPassword: async () => {
-        throw new Error("Password required but not provided. Use --password flag.");
-      },
-      requestConfirmation: async (message) => {
-        if (!this.autoApprove) {
-          process.stderr.write(`[confirm] signing requires --yes \u2014 NOT broadcasting: ${message}
-`);
-        } else {
-          process.stderr.write(`[confirm] auto-approved (--yes): ${message}
-`);
-        }
-        return this.autoApprove;
-      }
-    };
+// src/commands/settings.ts
+import { Chain as Chain9, fiatCurrencies as fiatCurrencies2, fiatCurrencyNameRecord as fiatCurrencyNameRecord3 } from "@vultisig/sdk";
+import chalk6 from "chalk";
+async function executeCurrency(ctx2, newCurrency) {
+  const vault = await ctx2.ensureActiveVault();
+  if (!newCurrency) {
+    const currentCurrency = vault.currency;
+    const currencyName2 = fiatCurrencyNameRecord3[currentCurrency];
+    printResult(chalk6.cyan("\nCurrent Currency Preference:"));
+    printResult(`  ${chalk6.green(currentCurrency.toUpperCase())} - ${currencyName2}`);
+    info(chalk6.gray(`
+Supported currencies: ${fiatCurrencies2.join(", ")}`));
+    info(chalk6.gray('Use "vultisig currency <code>" to change'));
+    return currentCurrency;
   }
-  /**
-   * Send a message and wait for the complete response.
-   * All tool calls and actions are executed automatically.
-   */
-  async ask(message) {
-    this.responseParts = [];
-    this.toolCalls = [];
-    this.transactions = [];
-    this.cards = [];
-    this.warnings = [];
-    this.outcome = void 0;
-    this.error = void 0;
-    this.errorIsTerminal = false;
-    const callbacks = this.getCallbacks();
-    await this.session.sendMessage(message, callbacks);
-    return this.partialResult();
+  const currency = newCurrency.toLowerCase();
+  if (!fiatCurrencies2.includes(currency)) {
+    error(`x Invalid currency: ${newCurrency}`);
+    warn(`Supported currencies: ${fiatCurrencies2.join(", ")}`);
+    throw new Error("Invalid currency");
   }
-  /**
-   * Snapshot of everything collected so far this turn. Identical to a normal
-   * `ask()` return, but callable from a catch block when `ask()` THREW mid-turn
-   * — e.g. the follow-up request that reports recent_actions back to the backend
-   * fails (timeout/5xx/auth) AFTER a tx has already broadcast and `onTxStatus`
-   * fired. Lets the caller still surface the already-broadcast tx hash in the
-   * error envelope instead of stranding funds the turn just moved.
-   */
-  partialResult() {
-    return {
-      sessionId: this.session.getConversationId() || "",
-      response: this.responseParts[this.responseParts.length - 1] || "",
-      toolCalls: this.toolCalls,
-      transactions: this.transactions,
-      cards: this.cards,
-      warnings: this.warnings,
-      error: this.error,
-      ...this.outcome ? { outcome: this.outcome } : {}
-    };
+  const spinner = createSpinner("Updating currency preference...");
+  await vault.setCurrency(currency);
+  spinner.succeed("Currency updated");
+  const currencyName = fiatCurrencyNameRecord3[currency];
+  if (isJsonOutput()) {
+    outputJson({ currency, name: currencyName, updated: true });
+    return currency;
   }
-};
-
-// src/agent/auth.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { Chain as Chain10, computePersonalSignHash, formatEcdsaSignature65 } from "@vultisig/sdk";
-async function authenticateVault(client, vault, password, maxAttempts = 3) {
-  const publicKey = vault.publicKeys.ecdsa;
-  const chainCode = vault.hexChainCode;
-  const ethAddress = await vault.address(Chain10.Ethereum);
-  const nonce = "0x" + randomBytes2(16).toString("hex");
-  const expiresAt = new Date(Date.now() + 15 * 60 * 1e3).toISOString();
-  const authMessage = JSON.stringify({
-    message: "Sign into Vultisig Plugin Marketplace",
-    nonce,
-    expiresAt,
-    address: ethAddress
-  });
-  const messageHash = computePersonalSignHash(authMessage);
-  let lastError = null;
-  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-    try {
-      if (attempt > 1) {
-        process.stderr.write(`  Retry ${attempt}/${maxAttempts}...
-`);
-      }
-      const signature = await vault.signBytes({ data: Buffer.from(messageHash), chain: Chain10.Ethereum }, {});
-      if (signature.recovery === void 0) {
-        throw new Error("Agent authentication requires an ECDSA recovery id");
-      }
-      const sigHex = formatEcdsaSignature65(signature.signature, signature.recovery);
-      const authResponse = await client.authenticate({
-        public_key: publicKey,
-        chain_code_hex: chainCode,
-        message: authMessage,
-        signature: sigHex
+  success(`
++ Currency preference set to ${currency.toUpperCase()} (${currencyName})`);
+  return currency;
+}
+async function executeServer(ctx2) {
+  const spinner = createSpinner("Checking server status...");
+  try {
+    const status = await ctx2.sdk.getServerStatus();
+    spinner.succeed("Server status retrieved");
+    if (isJsonOutput()) {
+      outputJson({ server: status });
+      return status;
+    }
+    printResult(chalk6.cyan("\nServer Status:\n"));
+    printResult(chalk6.bold("Fast Vault Server:"));
+    printResult(`  Online:   ${status.fastVault.online ? chalk6.green("Yes") : chalk6.red("No")}`);
+    if (status.fastVault.latency) {
+      printResult(`  Latency:  ${status.fastVault.latency}ms`);
+    }
+    printResult(chalk6.bold("\nMessage Relay:"));
+    printResult(`  Online:   ${status.messageRelay.online ? chalk6.green("Yes") : chalk6.red("No")}`);
+    if (status.messageRelay.latency) {
+      printResult(`  Latency:  ${status.messageRelay.latency}ms`);
+    }
+    return status;
+  } catch (err) {
+    spinner.fail("Failed to check server status");
+    error(`
+x ${err.message}`);
+    throw err;
+  }
+}
+async function executeAddressBook(ctx2, options = {}) {
+  if (options.add) {
+    let chain = options.chain;
+    let address = options.address;
+    let name = options.name;
+    const prompts = [];
+    if (!chain) {
+      prompts.push({
+        type: "select",
+        name: "chain",
+        message: "Select chain:",
+        choices: Object.values(Chain9)
       });
-      return {
-        token: authResponse.token,
-        expiresAt: authResponse.expires_at,
-        // Captured + persisted by the session token cache. The backend exposes
-        // POST /auth/refresh to exchange it for a fresh access token without a
-        // new MPC round; wiring that exchange is a future enhancement — today
-        // the CLI re-auths via a full MPC re-sign (authenticateVault), which is
-        // always available and avoids depending on refresh-token rotation.
-        refreshToken: authResponse.refresh_token
-      };
-    } catch (err) {
-      lastError = err;
-      if (attempt < maxAttempts && err.message?.includes("timeout")) {
-        continue;
-      }
-      throw err;
     }
+    if (!address) {
+      prompts.push({
+        type: "input",
+        name: "address",
+        message: "Enter address:",
+        validate: (input) => input.trim() !== "" || "Address is required"
+      });
+    }
+    if (!name) {
+      prompts.push({
+        type: "input",
+        name: "name",
+        message: "Enter name/label:",
+        validate: (input) => input.trim() !== "" || "Name is required"
+      });
+    }
+    if (prompts.length > 0) {
+      const answers = await prompt(prompts);
+      chain = chain || answers.chain;
+      address = address || answers.address?.trim();
+      name = name || answers.name?.trim();
+    }
+    const spinner2 = createSpinner("Adding address to address book...");
+    const entry = {
+      chain,
+      address,
+      name,
+      source: "saved",
+      dateAdded: Date.now()
+    };
+    await ctx2.sdk.addAddressBookEntry([entry]);
+    spinner2.succeed("Address added");
+    if (isJsonOutput()) {
+      outputJson({ added: entry });
+      return [];
+    }
+    success(`
++ Added ${name} (${chain}: ${address})`);
+    return [];
   }
-  throw lastError || new Error("Authentication failed after all attempts");
+  if (options.remove) {
+    const spinner2 = createSpinner("Removing address from address book...");
+    await ctx2.sdk.removeAddressBookEntry([{ address: options.remove, chain: options.chain }]);
+    spinner2.succeed("Address removed");
+    if (isJsonOutput()) {
+      outputJson({ removed: { address: options.remove, chain: options.chain } });
+      return [];
+    }
+    success(`
++ Removed ${options.remove}`);
+    return [];
+  }
+  const spinner = createSpinner("Loading address book...");
+  const addressBook = await ctx2.sdk.getAddressBook(options.chain);
+  spinner.succeed("Address book loaded");
+  const allEntries = [...addressBook.saved, ...addressBook.vaults];
+  if (isJsonOutput()) {
+    outputJson({ addressBook: allEntries, chain: options.chain });
+    return allEntries;
+  }
+  if (allEntries.length === 0) {
+    warn(`
+No addresses in address book${options.chain ? ` for ${options.chain}` : ""}`);
+    info(chalk6.gray("\nUse --add to add an address to the address book"));
+  } else {
+    printResult(chalk6.cyan(`
+Address Book${options.chain ? ` (${options.chain})` : ""}:
+`));
+    const table = allEntries.map((entry) => ({
+      Name: entry.name,
+      Chain: entry.chain,
+      Address: entry.address,
+      Source: entry.source
+    }));
+    printTable(table);
+    info(chalk6.gray("\nUse --add to add or --remove <address> to remove an address"));
+  }
+  return allEntries;
 }
 
-// src/agent/cards.ts
-import chalk8 from "chalk";
-var CLI_SUPPORTED_SURFACES = ["balance_summary", "turn_outcome"];
-function parseTurnOutcome(raw) {
-  if (!raw || typeof raw !== "object") return null;
-  const kind = raw.kind;
-  if (kind !== "success" && kind !== "blocked" && kind !== "refusal" && kind !== "error") return null;
-  const code = raw.code;
-  const detail = raw.detail;
-  return {
-    kind,
-    ...typeof code === "string" ? { code } : {},
-    ...typeof detail === "string" ? { detail } : {}
-  };
+// src/commands/rujira.ts
+import {
+  getRoutesSummary,
+  listEasyRoutes,
+  RujiraClient,
+  VultisigRujiraProvider
+} from "@vultisig/rujira";
+async function createRujiraClient(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  const provider = new VultisigRujiraProvider(vault);
+  const client = new RujiraClient({
+    signer: provider,
+    rpcEndpoint: options.rpcEndpoint,
+    config: {
+      // Allow overriding rest endpoint via config (used for thornode calls)
+      ...options.restEndpoint ? { restEndpoint: options.restEndpoint } : {}
+    }
+  });
+  const spinner = createSpinner("Connecting to Rujira/THORChain...");
+  await client.connect();
+  spinner.succeed("Connected");
+  return client;
 }
-function stripControlChars(s) {
-  let out = "";
-  for (const ch of s) {
-    const code = ch.codePointAt(0) ?? 0;
-    if (code <= 31 || code >= 127 && code <= 159) continue;
-    out += ch;
+async function executeRujiraBalance(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  const thorAddress = await vault.address("THORChain");
+  const client = await createRujiraClient(ctx2, options);
+  const spinner = createSpinner("Loading THORChain balances...");
+  const balances = await client.deposit.getBalances(thorAddress);
+  spinner.succeed("Balances loaded");
+  const filtered = options.securedOnly ? balances.filter((b) => b.denom.includes("-") || b.denom.includes("/")) : balances;
+  if (isJsonOutput()) {
+    outputJson({ thorAddress, balances: filtered });
+    return;
   }
-  return out;
-}
-function asString(v) {
-  return typeof v === "string" ? stripControlChars(v) : "";
-}
-function parseToken(v) {
-  if (!v || typeof v !== "object") return null;
-  const o = v;
-  const symbol = asString(o.symbol);
-  const amountDecimal = asString(o.amountDecimal);
-  if (!symbol && !amountDecimal) return null;
-  const token = { symbol, amountDecimal };
-  const amountUsd = asString(o.amountUsd);
-  if (amountUsd) token.amountUsd = amountUsd;
-  return token;
-}
-function parseAccount(v) {
-  if (!v || typeof v !== "object") return null;
-  const o = v;
-  const chainId = asString(o.chainId);
-  if (!chainId) return null;
-  const tokensRaw = Array.isArray(o.tokens) ? o.tokens : [];
-  const tokens = tokensRaw.map(parseToken).filter((t) => t !== null);
-  return { chainId, address: asString(o.address) || "\u2014", tokens };
+  info(`THORChain address: ${thorAddress}`);
+  if (!filtered.length) {
+    printResult("No balances found");
+    return;
+  }
+  printTable(
+    filtered.map((b) => ({
+      asset: b.asset,
+      denom: b.denom,
+      amount: b.formatted,
+      raw: b.amount
+    }))
+  );
 }
-function parseBalanceSummaryEnvelope(value) {
-  if (!value || typeof value !== "object") return null;
-  const o = value;
-  if (o.surface !== "balance_summary") return null;
-  if (!Array.isArray(o.accounts)) return null;
-  const accounts = o.accounts.map(parseAccount).filter((a) => a !== null);
-  if (accounts.length === 0) return null;
-  const card = { surface: "balance_summary", accounts };
-  if (o.stale === true) {
-    card.stale = true;
-    if (typeof o.stale_secs === "number") card.staleSecs = o.stale_secs;
+async function executeRujiraRoutes() {
+  const routes = listEasyRoutes();
+  const summary = getRoutesSummary();
+  if (isJsonOutput()) {
+    outputJson({ routes, summary });
+    return;
   }
-  return card;
+  printResult(summary);
+  printResult("");
+  printTable(
+    routes.map((r) => ({
+      name: r.name,
+      from: r.from,
+      to: r.to,
+      liquidity: r.liquidity,
+      description: r.description
+    }))
+  );
 }
-function matchBrace(text, start) {
-  let depth = 0;
-  let inString = false;
-  let escaped = false;
-  for (let i = start; i < text.length; i++) {
-    const ch = text[i];
-    if (inString) {
-      if (escaped) escaped = false;
-      else if (ch === "\\") escaped = true;
-      else if (ch === '"') inString = false;
-      continue;
-    }
-    if (ch === '"') inString = true;
-    else if (ch === "{") depth++;
-    else if (ch === "}") {
-      depth--;
-      if (depth === 0) return i;
+async function executeRujiraDeposit(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  const thorAddress = await vault.address("THORChain");
+  const client = await createRujiraClient(ctx2, options);
+  if (!options.asset) {
+    const spinner2 = createSpinner("Loading THORChain inbound addresses...");
+    const inbound = await client.deposit.getInboundAddresses();
+    spinner2.succeed("Inbound addresses loaded");
+    if (isJsonOutput()) {
+      outputJson({ thorAddress, inboundAddresses: inbound });
+      return;
     }
+    info(`THORChain address: ${thorAddress}`);
+    printResult("Provide an L1 asset to get a chain-specific inbound address + memo.");
+    printResult("Example: vultisig rujira deposit --asset BTC.BTC --amount 100000");
+    printResult("");
+    printTable(
+      inbound.map((a) => ({
+        chain: a.chain,
+        address: a.address,
+        halted: a.halted,
+        globalTradingPaused: a.global_trading_paused,
+        chainTradingPaused: a.chain_trading_paused
+      }))
+    );
+    return;
+  }
+  const amount = options.amount ?? "1";
+  const spinner = createSpinner("Preparing deposit instructions...");
+  const prepared = await client.deposit.prepare({
+    fromAsset: options.asset,
+    amount,
+    thorAddress,
+    affiliate: options.affiliate,
+    affiliateBps: options.affiliateBps
+  });
+  spinner.succeed("Deposit prepared");
+  if (isJsonOutput()) {
+    outputJson({ thorAddress, deposit: prepared });
+    return;
+  }
+  info(`THORChain address: ${thorAddress}`);
+  printResult("Deposit instructions (send from L1):");
+  printResult(`  Chain:          ${prepared.chain}`);
+  printResult(`  Asset:          ${prepared.asset}`);
+  printResult(`  Inbound address:${prepared.inboundAddress}`);
+  printResult(`  Memo:           ${prepared.memo}`);
+  printResult(`  Min amount:     ${prepared.minimumAmount}`);
+  if (prepared.warning) {
+    warn(prepared.warning);
   }
-  return -1;
 }
-function extractBalanceSummaryFromText(content) {
-  if (!content || !content.includes("balance_summary")) return null;
-  if (content.length > 2e5) return null;
-  for (let i = content.indexOf("{"); i !== -1; i = content.indexOf("{", i + 1)) {
-    const end = matchBrace(content, i);
-    if (end === -1) break;
-    const blob = content.slice(i, end + 1);
-    if (!blob.includes("balance_summary")) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(blob);
-    } catch {
-      continue;
+async function executeRujiraSwap(ctx2, options) {
+  const vault = await ctx2.ensureActiveVault();
+  if (!options.dryRun && !options.yes && isNonInteractive()) {
+    throw new ConfirmationRequiredError(
+      "Swap requires confirmation.",
+      "Pass --yes to confirm, or --dry-run to preview."
+    );
+  }
+  const client = await createRujiraClient(ctx2, options);
+  const destination = options.destination ?? await vault.address("THORChain");
+  const quoteSpinner = createSpinner("Getting FIN swap quote...");
+  const quote = await client.swap.getQuote({
+    fromAsset: options.fromAsset,
+    toAsset: options.toAsset,
+    amount: options.amount,
+    destination,
+    slippageBps: options.slippageBps
+  });
+  quoteSpinner.succeed("Quote received");
+  if (options.dryRun) {
+    if (isJsonOutput()) {
+      outputJson({ dryRun: true, quote });
+    } else {
+      printResult("FIN Swap Preview (dry-run)");
+      printResult(`  From:        ${options.fromAsset}`);
+      printResult(`  To:          ${options.toAsset}`);
+      printResult(`  Amount (in): ${options.amount}`);
+      printResult(`  Expected out:${quote.expectedOutput}`);
+      printResult(`  Min out:     ${quote.minimumOutput}`);
+      printResult(`  Contract:    ${quote.contractAddress}`);
     }
-    const card = parseBalanceSummaryEnvelope(parsed);
-    if (!card) continue;
-    const before = content.slice(0, i).replace(/```(?:json)?\s*$/i, "");
-    const after = content.slice(end + 1).replace(/^\s*```/, "");
-    const remainingText = (before + after).trim();
-    return { card, remainingText };
+    return;
   }
-  return null;
-}
-function shortenAddress(address) {
-  if (!address || address === "\u2014") return address || "\u2014";
-  if (address.length <= 16) return address;
-  return `${address.slice(0, 8)}\u2026${address.slice(-6)}`;
-}
-function parseUsd(amountUsd) {
-  if (!amountUsd) return null;
-  const cleaned = amountUsd.replace(/[$,\s]/g, "");
-  if (!cleaned) return null;
-  const n = Number(cleaned);
-  return Number.isFinite(n) ? n : null;
-}
-function formatUsd(n) {
-  return `$${n.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
-}
-function renderBalanceSummaryCard(card) {
-  const lines = [];
-  const staleCue = card.stale ? chalk8.gray(` (stale${card.staleSecs ? ` ~${Math.round(card.staleSecs / 60)}m` : ""}, refreshing\u2026)`) : "";
-  lines.push(chalk8.bold("  Balances") + staleCue);
-  let total = 0;
-  let sawUsd = false;
-  for (const account of card.accounts) {
-    lines.push(`  ${chalk8.cyan(account.chainId)} ${chalk8.gray(`(${shortenAddress(account.address)})`)}`);
-    if (account.tokens.length === 0) {
-      lines.push(chalk8.gray("    (no balances)"));
-      continue;
+  if (!isJsonOutput()) {
+    printResult("FIN Swap Preview");
+    printResult(`  From:        ${options.fromAsset}`);
+    printResult(`  To:          ${options.toAsset}`);
+    printResult(`  Amount (in): ${options.amount}`);
+    printResult(`  Expected out:${quote.expectedOutput}`);
+    printResult(`  Min out:     ${quote.minimumOutput}`);
+    printResult(`  Contract:    ${quote.contractAddress}`);
+    if (quote.warning) {
+      warn(quote.warning);
     }
-    for (const token of account.tokens) {
-      const usd = parseUsd(token.amountUsd);
-      if (usd !== null) {
-        total += usd;
-        sawUsd = true;
-      }
-      const symbol = token.symbol.padEnd(10);
-      const amount = token.amountDecimal.padStart(16);
-      const usdCol = token.amountUsd ? chalk8.gray(`  ${token.amountUsd}`) : "";
-      lines.push(`    ${chalk8.bold(symbol)}${amount}${usdCol}`);
+  }
+  if (!options.yes) {
+    warn("This command will execute a swap. Re-run with -y/--yes to skip this warning.");
+    throw new ConfirmationRequiredError(
+      "Swap requires confirmation.",
+      "Pass --yes to confirm, or --dry-run to preview."
+    );
+  }
+  await ensureVaultUnlocked(vault, options.password);
+  const execSpinner = createSpinner("Executing FIN swap...");
+  const result = await client.swap.execute(quote, { slippageBps: options.slippageBps });
+  execSpinner.succeed("Swap submitted");
+  if (isJsonOutput()) {
+    outputJson({ quote, result });
+  } else {
+    printResult(`Tx Hash: ${result.txHash}`);
+  }
+}
+async function executeRujiraWithdraw(ctx2, options) {
+  const vault = await ctx2.ensureActiveVault();
+  if (!options.dryRun && !options.yes && isNonInteractive()) {
+    throw new ConfirmationRequiredError(
+      "Withdrawal requires confirmation.",
+      "Pass --yes to confirm, or --dry-run to preview."
+    );
+  }
+  const client = await createRujiraClient(ctx2, options);
+  const prepSpinner = createSpinner("Preparing withdrawal (MsgDeposit)...");
+  const prepared = await client.withdraw.prepare({
+    asset: options.asset,
+    amount: options.amount,
+    l1Address: options.l1Address,
+    maxFeeBps: options.maxFeeBps
+  });
+  prepSpinner.succeed("Withdrawal prepared");
+  if (options.dryRun) {
+    if (isJsonOutput()) {
+      outputJson({ dryRun: true, prepared });
+    } else {
+      printResult("Withdraw Preview (dry-run)");
+      printResult(`  Asset:       ${prepared.asset}`);
+      printResult(`  Amount:      ${prepared.amount}`);
+      printResult(`  Destination: ${prepared.destination}`);
+      printResult(`  Memo:        ${prepared.memo}`);
+      printResult(`  Est. fee:    ${prepared.estimatedFee}`);
     }
+    return;
   }
-  if (sawUsd) {
-    lines.push(chalk8.gray("  " + "\u2500".repeat(36)));
-    lines.push(`  ${chalk8.bold("Total")}  ${chalk8.green(formatUsd(total))}`);
+  if (!isJsonOutput()) {
+    printResult("Withdraw Preview");
+    printResult(`  Asset:       ${prepared.asset}`);
+    printResult(`  Amount:      ${prepared.amount}`);
+    printResult(`  Destination: ${prepared.destination}`);
+    printResult(`  Memo:        ${prepared.memo}`);
+    printResult(`  Est. fee:    ${prepared.estimatedFee}`);
+  }
+  if (!options.yes) {
+    warn("This command will broadcast a THORChain MsgDeposit withdrawal. Re-run with -y/--yes to proceed.");
+    throw new ConfirmationRequiredError(
+      "Withdrawal requires confirmation.",
+      "Pass --yes to confirm, or --dry-run to preview."
+    );
+  }
+  await ensureVaultUnlocked(vault, options.password);
+  const execSpinner = createSpinner("Broadcasting withdrawal...");
+  const result = await client.withdraw.execute(prepared);
+  execSpinner.succeed("Withdrawal submitted");
+  if (isJsonOutput()) {
+    outputJson({ prepared, result });
+  } else {
+    printResult(`Tx Hash: ${result.txHash}`);
   }
-  return lines.join("\n");
 }
 
-// src/agent/client.ts
-import { randomUUID } from "node:crypto";
-
-// src/agent/toolOutputSigning.ts
-import { getChainKind as getChainKind4 } from "@vultisig/sdk";
-
-// src/agent/executor.ts
+// src/commands/discount.ts
 import {
-  Chain as Chain11,
-  chainFeeCoin,
-  getChainKind as getChainKind3,
-  resolveChainReference,
-  VaultError as VaultError3,
-  VaultErrorCode as VaultErrorCode3,
-  Vultisig as VultisigSdk
+  baseAffiliateBps,
+  vultDiscountTierBps,
+  vultDiscountTierMinBalances
 } from "@vultisig/sdk";
-
-// ../../node_modules/viem/_esm/accounts/utils/publicKeyToAddress.js
-init_getAddress();
-init_keccak256();
-function publicKeyToAddress(publicKey) {
-  const address = keccak256(`0x${publicKey.substring(4)}`).substring(26);
-  return checksumAddress(`0x${address}`);
+import chalk7 from "chalk";
+var TIER_CONFIG = {
+  none: { bps: baseAffiliateBps, discount: 0 },
+  ...Object.fromEntries(
+    Object.entries(vultDiscountTierMinBalances).map(([tier, minVult]) => [
+      tier,
+      {
+        bps: baseAffiliateBps - vultDiscountTierBps[tier],
+        discount: vultDiscountTierBps[tier],
+        minVult
+      }
+    ])
+  )
+};
+function getTierColor(tier) {
+  const colors = {
+    none: chalk7.gray,
+    bronze: chalk7.hex("#CD7F32"),
+    silver: chalk7.hex("#C0C0C0"),
+    gold: chalk7.hex("#FFD700"),
+    platinum: chalk7.hex("#E5E4E2"),
+    diamond: chalk7.hex("#B9F2FF"),
+    ultimate: chalk7.hex("#FF00FF")
+  };
+  return colors[tier] || chalk7.white;
 }
-
-// ../../node_modules/viem/_esm/utils/signature/recoverPublicKey.js
-init_isHex();
-init_size();
-init_fromHex();
-init_toHex();
-async function recoverPublicKey({ hash, signature }) {
-  const hashHex = isHex(hash) ? hash : toHex(hash);
-  const { secp256k1: secp256k12 } = await Promise.resolve().then(() => (init_secp256k1(), secp256k1_exports));
-  const signature_ = (() => {
-    if (typeof signature === "object" && "r" in signature && "s" in signature) {
-      const { r, s, v, yParity } = signature;
-      const yParityOrV2 = Number(yParity ?? v);
-      const recoveryBit2 = toRecoveryBit(yParityOrV2);
-      return new secp256k12.Signature(hexToBigInt(r), hexToBigInt(s)).addRecoveryBit(recoveryBit2);
-    }
-    const signatureHex = isHex(signature) ? signature : toHex(signature);
-    if (size(signatureHex) !== 65)
-      throw new Error("invalid signature length");
-    const yParityOrV = hexToNumber(`0x${signatureHex.slice(130)}`);
-    const recoveryBit = toRecoveryBit(yParityOrV);
-    return secp256k12.Signature.fromCompact(signatureHex.substring(2, 130)).addRecoveryBit(recoveryBit);
-  })();
-  const publicKey = signature_.recoverPublicKey(hashHex.substring(2)).toHex(false);
-  return `0x${publicKey}`;
+function getNextTier(currentTier) {
+  const tierOrder = ["none", "bronze", "silver", "gold", "platinum", "diamond", "ultimate"];
+  const currentIndex = tierOrder.indexOf(currentTier);
+  if (currentIndex === -1 || currentIndex >= tierOrder.length - 1) {
+    return null;
+  }
+  const nextTierName = tierOrder[currentIndex + 1];
+  const config = TIER_CONFIG[nextTierName];
+  if ("minVult" in config) {
+    return { name: nextTierName, vultRequired: config.minVult };
+  }
+  return null;
 }
-function toRecoveryBit(yParityOrV) {
-  if (yParityOrV === 0 || yParityOrV === 1)
-    return yParityOrV;
-  if (yParityOrV === 27)
-    return 0;
-  if (yParityOrV === 28)
-    return 1;
-  throw new Error("Invalid yParityOrV value");
+async function executeDiscount(ctx2, options = {}) {
+  const vault = await ctx2.ensureActiveVault();
+  const spinner = createSpinner(options.refresh ? "Refreshing discount tier..." : "Loading discount tier...");
+  const tierResult = options.refresh ? await vault.updateDiscountTier() : await vault.getDiscountTier();
+  const tier = tierResult || "none";
+  const config = TIER_CONFIG[tier];
+  const nextTier = getNextTier(tier);
+  const tierInfo = {
+    tier,
+    feeBps: config.bps,
+    discountBps: config.discount,
+    nextTier
+  };
+  spinner.succeed("Discount tier loaded");
+  if (isJsonOutput()) {
+    outputJson({
+      tier: tierInfo.tier,
+      feeBps: tierInfo.feeBps,
+      discountBps: tierInfo.discountBps,
+      nextTier: tierInfo.nextTier
+    });
+    return tierInfo;
+  }
+  displayDiscountTier(tierInfo);
+  return tierInfo;
 }
-
-// ../../node_modules/viem/_esm/utils/signature/recoverAddress.js
-async function recoverAddress({ hash, signature }) {
-  return publicKeyToAddress(await recoverPublicKey({ hash, signature }));
+function displayDiscountTier(tierInfo) {
+  const tierColor = getTierColor(tierInfo.tier);
+  printResult(chalk7.cyan("\n+----------------------------------------+"));
+  printResult(chalk7.cyan("|          VULT Discount Tier            |"));
+  printResult(chalk7.cyan("+----------------------------------------+\n"));
+  const tierDisplay = tierInfo.tier === "none" ? chalk7.gray("No Tier") : tierColor(tierInfo.tier.charAt(0).toUpperCase() + tierInfo.tier.slice(1));
+  printResult(`  Current Tier:   ${tierDisplay}`);
+  if (tierInfo.tier === "none") {
+    printResult(`  Swap Fee:       ${chalk7.gray("50 bps (0.50%)")}`);
+    printResult(`  Discount:       ${chalk7.gray("None")}`);
+  } else {
+    printResult(`  Swap Fee:       ${chalk7.green(`${tierInfo.feeBps} bps (${(tierInfo.feeBps / 100).toFixed(2)}%)`)}`);
+    printResult(`  Discount:       ${chalk7.green(`${tierInfo.discountBps} bps saved`)}`);
+  }
+  if (tierInfo.nextTier) {
+    const nextTierColor = getTierColor(tierInfo.nextTier.name);
+    printResult(chalk7.bold("\n  Next Tier:"));
+    printResult(
+      `    ${nextTierColor(tierInfo.nextTier.name.charAt(0).toUpperCase() + tierInfo.nextTier.name.slice(1))} - requires ${tierInfo.nextTier.vultRequired.toLocaleString()} VULT`
+    );
+  } else if (tierInfo.tier === "ultimate") {
+    printResult(chalk7.bold("\n  ") + chalk7.magenta("You have the highest tier! 0% swap fees."));
+  }
+  info(chalk7.gray("\n  Tip: Thorguard NFT holders get +1 tier upgrade (up to gold)"));
+  printResult("");
 }
 
-// ../../node_modules/viem/_esm/utils/signature/hashTypedData.js
-init_encodeAbiParameters();
-init_concat();
-init_toHex();
-init_keccak256();
+// src/commands/auth.ts
+import { executeAuthLogout, executeAuthSetup, executeAuthStatus } from "@vultisig/client-shared";
 
-// ../../node_modules/viem/_esm/utils/typedData.js
-init_abi();
-init_address();
+// src/commands/agent.ts
+import chalk10 from "chalk";
+import Table from "cli-table3";
 
-// ../../node_modules/viem/_esm/errors/typedData.js
-init_stringify();
-init_base();
-var InvalidDomainError = class extends BaseError {
-  constructor({ domain }) {
-    super(`Invalid domain "${stringify(domain)}".`, {
-      metaMessages: ["Must be a valid EIP-712 domain."]
-    });
+// src/agent/ask.ts
+var AskInterface = class {
+  session;
+  verbose;
+  autoApprove;
+  responseParts = [];
+  toolCalls = [];
+  transactions = [];
+  cards = [];
+  warnings = [];
+  outcome;
+  error;
+  // Tracks whether the currently-latched `error` is a terminal one (e.g. the
+  // depth cap). A terminal error may overwrite a prior non-terminal one; once a
+  // terminal error is recorded, later frames cannot replace it. See onError.
+  errorIsTerminal = false;
+  constructor(session, verbose = false, autoApprove = false) {
+    this.session = session;
+    this.verbose = verbose;
+    this.autoApprove = autoApprove;
   }
-};
-var InvalidPrimaryTypeError = class extends BaseError {
-  constructor({ primaryType, types }) {
-    super(`Invalid primary type \`${primaryType}\` must be one of \`${JSON.stringify(Object.keys(types))}\`.`, {
-      docsPath: "/api/glossary/Errors#typeddatainvalidprimarytypeerror",
-      metaMessages: ["Check that the primary type is a key in `types`."]
-    });
+  /**
+   * Whether the turn threw with a still-unacknowledged broadcast (the F1
+   * ack-failure case). The command's catch uses this to gate the ACK_FAILED
+   * re-tag so a later, unrelated retryable error after an already-acked
+   * broadcast keeps its own (retryable) classification instead of exit 8.
+   */
+  hasUnacknowledgedBroadcast() {
+    return this.session.hasUnacknowledgedBroadcast();
   }
-};
-var InvalidStructTypeError = class extends BaseError {
-  constructor({ type }) {
-    super(`Struct type "${type}" is invalid.`, {
-      metaMessages: ["Struct type must not be a Solidity type."],
-      name: "InvalidStructTypeError"
-    });
+  /**
+   * Get UI callbacks that silently collect results.
+   * Tool progress is logged to stderr in verbose mode.
+   */
+  getCallbacks() {
+    return {
+      onTextDelta: (_delta) => {
+      },
+      onToolCall: (_id, action, params) => {
+        if (this.verbose) {
+          const paramStr = params ? ` ${JSON.stringify(params)}` : "";
+          process.stderr.write(`[tool] ${action}${paramStr} ...
+`);
+        }
+      },
+      onToolResult: (id, action, success2, data, error2, code) => {
+        this.toolCalls.push({ id, action, success: success2, data, error: error2, code });
+        if (this.verbose) {
+          const status = success2 ? "ok" : `error: ${error2}${code ? ` [${code}]` : ""}`;
+          process.stderr.write(`[tool] ${action}: ${status}
+`);
+        }
+      },
+      onAssistantMessage: (content) => {
+        if (content) {
+          this.responseParts.push(content);
+        }
+      },
+      onBalanceSummary: (card) => {
+        this.cards.push(card);
+      },
+      onTurnOutcome: (outcome) => {
+        this.outcome = outcome;
+      },
+      onSuggestions: (_suggestions) => {
+      },
+      onTxStatus: (txHash, chain, status, explorerUrl) => {
+        const existing = this.transactions.find((t) => t.hash === txHash);
+        if (existing) {
+          existing.status = status;
+          if (explorerUrl) existing.explorerUrl = explorerUrl;
+        } else {
+          this.transactions.push({ hash: txHash, chain, explorerUrl, status });
+        }
+        if (this.verbose) {
+          process.stderr.write(`[tx] ${chain}: ${txHash} (${status})
+`);
+        }
+      },
+      onError: (message, code) => {
+        const isTerminal2 = isTerminalAgentErrorCode(code);
+        if (!this.error || isTerminal2 && !this.errorIsTerminal) {
+          this.error = { message, code };
+          this.errorIsTerminal = isTerminal2;
+        }
+        process.stderr.write(`[error] ${message} [${code}]
+`);
+      },
+      onProtocolWarning: (warning) => {
+        this.warnings.push(warning);
+        process.stderr.write(`[warning] ${warning.message} [${warning.code}]
+`);
+      },
+      onDone: () => {
+      },
+      requestPassword: async () => {
+        throw new Error("Password required but not provided. Use --password flag.");
+      },
+      requestConfirmation: async (message) => {
+        if (!this.autoApprove) {
+          process.stderr.write(`[confirm] signing requires --yes \u2014 NOT broadcasting: ${message}
+`);
+        } else {
+          process.stderr.write(`[confirm] auto-approved (--yes): ${message}
+`);
+        }
+        return this.autoApprove;
+      }
+    };
+  }
+  /**
+   * Send a message and wait for the complete response.
+   * All tool calls and actions are executed automatically.
+   */
+  async ask(message) {
+    this.responseParts = [];
+    this.toolCalls = [];
+    this.transactions = [];
+    this.cards = [];
+    this.warnings = [];
+    this.outcome = void 0;
+    this.error = void 0;
+    this.errorIsTerminal = false;
+    const callbacks = this.getCallbacks();
+    await this.session.sendMessage(message, callbacks);
+    return this.partialResult();
+  }
+  /**
+   * Snapshot of everything collected so far this turn. Identical to a normal
+   * `ask()` return, but callable from a catch block when `ask()` THREW mid-turn
+   * — e.g. the follow-up request that reports recent_actions back to the backend
+   * fails (timeout/5xx/auth) AFTER a tx has already broadcast and `onTxStatus`
+   * fired. Lets the caller still surface the already-broadcast tx hash in the
+   * error envelope instead of stranding funds the turn just moved.
+   */
+  partialResult() {
+    return {
+      sessionId: this.session.getConversationId() || "",
+      response: this.responseParts[this.responseParts.length - 1] || "",
+      toolCalls: this.toolCalls,
+      transactions: this.transactions,
+      cards: this.cards,
+      warnings: this.warnings,
+      error: this.error,
+      ...this.outcome ? { outcome: this.outcome } : {}
+    };
   }
 };
 
-// ../../node_modules/viem/_esm/utils/typedData.js
-init_isAddress();
-init_size();
-init_toHex();
-init_regex();
-function validateTypedData(parameters) {
-  const { domain, message, primaryType, types } = parameters;
-  const validateData = (struct, data) => {
-    for (const param of struct) {
-      const { name, type } = param;
-      const value = data[name];
-      const integerMatch = type.match(integerRegex);
-      if (integerMatch && (typeof value === "number" || typeof value === "bigint")) {
-        const [_type, base, size_] = integerMatch;
-        numberToHex(value, {
-          signed: base === "int",
-          size: Number.parseInt(size_, 10) / 8
-        });
+// src/agent/auth.ts
+import { randomBytes as randomBytes3 } from "node:crypto";
+import { Chain as Chain10, computePersonalSignHash, formatEcdsaSignature65 } from "@vultisig/sdk";
+async function authenticateVault(client, vault, password, maxAttempts = 3) {
+  const publicKey = vault.publicKeys.ecdsa;
+  const chainCode = vault.hexChainCode;
+  const ethAddress = await vault.address(Chain10.Ethereum);
+  const nonce = "0x" + randomBytes3(16).toString("hex");
+  const expiresAt = new Date(Date.now() + 15 * 60 * 1e3).toISOString();
+  const authMessage = JSON.stringify({
+    message: "Sign into Vultisig Plugin Marketplace",
+    nonce,
+    expiresAt,
+    address: ethAddress
+  });
+  const messageHash = computePersonalSignHash(authMessage);
+  let lastError = null;
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    try {
+      if (attempt > 1) {
+        process.stderr.write(`  Retry ${attempt}/${maxAttempts}...
+`);
       }
-      if (type === "address" && typeof value === "string" && !isAddress(value))
-        throw new InvalidAddressError2({ address: value });
-      const bytesMatch = type.match(bytesRegex);
-      if (bytesMatch) {
-        const [_type, size_] = bytesMatch;
-        if (size_ && size(value) !== Number.parseInt(size_, 10))
-          throw new BytesSizeMismatchError({
-            expectedSize: Number.parseInt(size_, 10),
-            givenSize: size(value)
-          });
+      const signature = await vault.signBytes({ data: Buffer.from(messageHash), chain: Chain10.Ethereum }, {});
+      if (signature.recovery === void 0) {
+        throw new Error("Agent authentication requires an ECDSA recovery id");
       }
-      const struct2 = types[type];
-      if (struct2) {
-        validateReference(type);
-        validateData(struct2, value);
+      const sigHex = formatEcdsaSignature65(signature.signature, signature.recovery);
+      const authResponse = await client.authenticate({
+        public_key: publicKey,
+        chain_code_hex: chainCode,
+        message: authMessage,
+        signature: sigHex
+      });
+      return {
+        token: authResponse.token,
+        expiresAt: authResponse.expires_at,
+        // Captured + persisted by the session token cache. The backend exposes
+        // POST /auth/refresh to exchange it for a fresh access token without a
+        // new MPC round; wiring that exchange is a future enhancement — today
+        // the CLI re-auths via a full MPC re-sign (authenticateVault), which is
+        // always available and avoids depending on refresh-token rotation.
+        refreshToken: authResponse.refresh_token
+      };
+    } catch (err) {
+      lastError = err;
+      if (attempt < maxAttempts && err.message?.includes("timeout")) {
+        continue;
       }
+      throw err;
     }
-  };
-  if (types.EIP712Domain && domain) {
-    if (typeof domain !== "object")
-      throw new InvalidDomainError({ domain });
-    validateData(types.EIP712Domain, domain);
-  }
-  if (primaryType !== "EIP712Domain") {
-    if (types[primaryType])
-      validateData(types[primaryType], message);
-    else
-      throw new InvalidPrimaryTypeError({ primaryType, types });
   }
-}
-function getTypesForEIP712Domain({ domain }) {
-  return [
-    typeof domain?.name === "string" && { name: "name", type: "string" },
-    domain?.version && { name: "version", type: "string" },
-    (typeof domain?.chainId === "number" || typeof domain?.chainId === "bigint") && {
-      name: "chainId",
-      type: "uint256"
-    },
-    domain?.verifyingContract && {
-      name: "verifyingContract",
-      type: "address"
-    },
-    domain?.salt && { name: "salt", type: "bytes32" }
-  ].filter(Boolean);
-}
-function validateReference(type) {
-  if (type === "address" || type === "bool" || type === "string" || type.startsWith("bytes") || type.startsWith("uint") || type.startsWith("int"))
-    throw new InvalidStructTypeError({ type });
+  throw lastError || new Error("Authentication failed after all attempts");
 }
 
-// ../../node_modules/viem/_esm/utils/signature/hashTypedData.js
-function hashTypedData(parameters) {
-  const { domain = {}, message, primaryType } = parameters;
-  const types = {
-    EIP712Domain: getTypesForEIP712Domain({ domain }),
-    ...parameters.types
+// src/agent/cards.ts
+import chalk8 from "chalk";
+var CLI_SUPPORTED_SURFACES = ["balance_summary", "turn_outcome"];
+function parseTurnOutcome(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const kind = raw.kind;
+  if (kind !== "success" && kind !== "blocked" && kind !== "refusal" && kind !== "error") return null;
+  const code = raw.code;
+  const detail = raw.detail;
+  return {
+    kind,
+    ...typeof code === "string" ? { code } : {},
+    ...typeof detail === "string" ? { detail } : {}
   };
-  validateTypedData({
-    domain,
-    message,
-    primaryType,
-    types
-  });
-  const parts = ["0x1901"];
-  if (domain)
-    parts.push(hashDomain({
-      domain,
-      types
-    }));
-  if (primaryType !== "EIP712Domain")
-    parts.push(hashStruct({
-      data: message,
-      primaryType,
-      types
-    }));
-  return keccak256(concat(parts));
 }
-function hashDomain({ domain, types }) {
-  return hashStruct({
-    data: domain,
-    primaryType: "EIP712Domain",
-    types
-  });
+function stripControlChars(s) {
+  let out = "";
+  for (const ch of s) {
+    const code = ch.codePointAt(0) ?? 0;
+    if (code <= 31 || code >= 127 && code <= 159) continue;
+    out += ch;
+  }
+  return out;
 }
-function hashStruct({ data, primaryType, types }) {
-  const encoded = encodeData({
-    data,
-    primaryType,
-    types
-  });
-  return keccak256(encoded);
+function asString(v) {
+  return typeof v === "string" ? stripControlChars(v) : "";
 }
-function encodeData({ data, primaryType, types }) {
-  const encodedTypes = [{ type: "bytes32" }];
-  const encodedValues = [hashType({ primaryType, types })];
-  for (const field of types[primaryType]) {
-    const [type, value] = encodeField({
-      types,
-      name: field.name,
-      type: field.type,
-      value: data[field.name]
-    });
-    encodedTypes.push(type);
-    encodedValues.push(value);
-  }
-  return encodeAbiParameters(encodedTypes, encodedValues);
+function parseToken(v) {
+  if (!v || typeof v !== "object") return null;
+  const o = v;
+  const symbol = asString(o.symbol);
+  const amountDecimal = asString(o.amountDecimal);
+  if (!symbol && !amountDecimal) return null;
+  const token = { symbol, amountDecimal };
+  const amountUsd = asString(o.amountUsd);
+  if (amountUsd) token.amountUsd = amountUsd;
+  return token;
 }
-function hashType({ primaryType, types }) {
-  const encodedHashType = toHex(encodeType({ primaryType, types }));
-  return keccak256(encodedHashType);
+function parseAccount(v) {
+  if (!v || typeof v !== "object") return null;
+  const o = v;
+  const chainId = asString(o.chainId);
+  if (!chainId) return null;
+  const tokensRaw = Array.isArray(o.tokens) ? o.tokens : [];
+  const tokens = tokensRaw.map(parseToken).filter((t) => t !== null);
+  return { chainId, address: asString(o.address) || "\u2014", tokens };
 }
-function encodeType({ primaryType, types }) {
-  let result = "";
-  const unsortedDeps = findTypeDependencies({ primaryType, types });
-  unsortedDeps.delete(primaryType);
-  const deps = [primaryType, ...Array.from(unsortedDeps).sort()];
-  for (const type of deps) {
-    result += `${type}(${types[type].map(({ name, type: t }) => `${t} ${name}`).join(",")})`;
+function parseBalanceSummaryEnvelope(value) {
+  if (!value || typeof value !== "object") return null;
+  const o = value;
+  if (o.surface !== "balance_summary") return null;
+  if (!Array.isArray(o.accounts)) return null;
+  const accounts = o.accounts.map(parseAccount).filter((a) => a !== null);
+  if (accounts.length === 0) return null;
+  const card = { surface: "balance_summary", accounts };
+  if (o.stale === true) {
+    card.stale = true;
+    if (typeof o.stale_secs === "number") card.staleSecs = o.stale_secs;
   }
-  return result;
+  return card;
 }
-function findTypeDependencies({ primaryType: primaryType_, types }, results = /* @__PURE__ */ new Set()) {
-  const match = primaryType_.match(/^\w*/u);
-  const primaryType = match?.[0];
-  if (results.has(primaryType) || types[primaryType] === void 0) {
-    return results;
+function matchBrace(text, start) {
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (let i = start; i < text.length; i++) {
+    const ch = text[i];
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') inString = true;
+    else if (ch === "{") depth++;
+    else if (ch === "}") {
+      depth--;
+      if (depth === 0) return i;
+    }
   }
-  results.add(primaryType);
-  for (const field of types[primaryType]) {
-    findTypeDependencies({ primaryType: field.type, types }, results);
+  return -1;
+}
+function extractBalanceSummaryFromText(content) {
+  if (!content || !content.includes("balance_summary")) return null;
+  if (content.length > 2e5) return null;
+  for (let i = content.indexOf("{"); i !== -1; i = content.indexOf("{", i + 1)) {
+    const end = matchBrace(content, i);
+    if (end === -1) break;
+    const blob = content.slice(i, end + 1);
+    if (!blob.includes("balance_summary")) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(blob);
+    } catch {
+      continue;
+    }
+    const card = parseBalanceSummaryEnvelope(parsed);
+    if (!card) continue;
+    const before = content.slice(0, i).replace(/```(?:json)?\s*$/i, "");
+    const after = content.slice(end + 1).replace(/^\s*```/, "");
+    const remainingText = (before + after).trim();
+    return { card, remainingText };
   }
-  return results;
+  return null;
 }
-function encodeField({ types, name, type, value }) {
-  if (types[type] !== void 0) {
-    return [
-      { type: "bytes32" },
-      keccak256(encodeData({ data: value, primaryType: type, types }))
-    ];
+function shortenAddress(address) {
+  if (!address || address === "\u2014") return address || "\u2014";
+  if (address.length <= 16) return address;
+  return `${address.slice(0, 8)}\u2026${address.slice(-6)}`;
+}
+function parseUsd(amountUsd) {
+  if (!amountUsd) return null;
+  const cleaned = amountUsd.replace(/[$,\s]/g, "");
+  if (!cleaned) return null;
+  const n = Number(cleaned);
+  return Number.isFinite(n) ? n : null;
+}
+function formatUsd(n) {
+  return `$${n.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+}
+function renderBalanceSummaryCard(card) {
+  const lines = [];
+  const staleCue = card.stale ? chalk8.gray(` (stale${card.staleSecs ? ` ~${Math.round(card.staleSecs / 60)}m` : ""}, refreshing\u2026)`) : "";
+  lines.push(chalk8.bold("  Balances") + staleCue);
+  let total = 0;
+  let sawUsd = false;
+  for (const account of card.accounts) {
+    lines.push(`  ${chalk8.cyan(account.chainId)} ${chalk8.gray(`(${shortenAddress(account.address)})`)}`);
+    if (account.tokens.length === 0) {
+      lines.push(chalk8.gray("    (no balances)"));
+      continue;
+    }
+    for (const token of account.tokens) {
+      const usd = parseUsd(token.amountUsd);
+      if (usd !== null) {
+        total += usd;
+        sawUsd = true;
+      }
+      const symbol = token.symbol.padEnd(10);
+      const amount = token.amountDecimal.padStart(16);
+      const usdCol = token.amountUsd ? chalk8.gray(`  ${token.amountUsd}`) : "";
+      lines.push(`    ${chalk8.bold(symbol)}${amount}${usdCol}`);
+    }
   }
-  if (type === "bytes")
-    return [{ type: "bytes32" }, keccak256(value)];
-  if (type === "string")
-    return [{ type: "bytes32" }, keccak256(toHex(value))];
-  if (type.lastIndexOf("]") === type.length - 1) {
-    const parsedType = type.slice(0, type.lastIndexOf("["));
-    const typeValuePairs = value.map((item) => encodeField({
-      name,
-      type: parsedType,
-      types,
-      value: item
-    }));
-    return [
-      { type: "bytes32" },
-      keccak256(encodeAbiParameters(typeValuePairs.map(([t]) => t), typeValuePairs.map(([, v]) => v)))
-    ];
+  if (sawUsd) {
+    lines.push(chalk8.gray("  " + "\u2500".repeat(36)));
+    lines.push(`  ${chalk8.bold("Total")}  ${chalk8.green(formatUsd(total))}`);
   }
-  return [{ type }, value];
+  return lines.join("\n");
 }
 
-// ../../node_modules/viem/_esm/index.js
-init_formatUnits();
+// src/agent/client.ts
+import { randomUUID } from "node:crypto";
+
+// src/agent/toolOutputSigning.ts
+import { getChainKind as getChainKind4 } from "@vultisig/sdk";
+
+// src/agent/executor.ts
+import {
+  Chain as Chain11,
+  chainFeeCoin,
+  getChainKind as getChainKind3,
+  resolveChainReference,
+  VaultError as VaultError3,
+  VaultErrorCode as VaultErrorCode3,
+  Vultisig as VultisigSdk
+} from "@vultisig/sdk";
 
 // src/core/VaultStateStore.ts
 import * as fs3 from "node:fs";
@@ -11992,6 +12148,7 @@ var CLI_SIGNABLE_PREP_TOOLS = /* @__PURE__ */ new Set([
   "execute_send",
   "execute_contract_call"
 ]);
+var CLI_SIGNABLE_YIELD_TOOLS = /* @__PURE__ */ new Set(["yield_enter", "yield_exit"]);
 function asRecord(value) {
   if (typeof value === "string") {
     try {
@@ -12092,11 +12249,50 @@ function buildTxReadyFromToolOutput(toolName, output) {
   }
   return { __buildTx: true, chain: chainStr, chain_id: chainIdStr, ...action ? { action } : {}, tx: main };
 }
+function buildTxReadyFromYieldOutput(toolName, output) {
+  if (!CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) return null;
+  const env = asRecord(output);
+  if (!env) return null;
+  if (env.status === "error" || "error" in env) return null;
+  const chain = asChainString(env.chain);
+  if (!chain) return null;
+  const resolved = resolveChain(chain);
+  if (!resolved || getChainKind4(resolved) !== "evm") return null;
+  const chainStr = chain;
+  const rawTxs = env.transactions;
+  if (!Array.isArray(rawTxs) || rawTxs.length === 0) return null;
+  const legs = [];
+  for (const raw of rawTxs) {
+    const legObj = asRecord(raw);
+    if (!legObj) return null;
+    if (legObj.status === "error" || "error" in legObj) return null;
+    const leg = extractLeg(legObj);
+    if (!leg) return null;
+    legs.push(leg);
+  }
+  if (legs.length > 2) return null;
+  const action = typeof env.action === "string" && env.action !== "" ? env.action : void 0;
+  if (legs.length === 2) {
+    const [approveLeg, mainLeg] = legs;
+    return {
+      __buildTx: true,
+      chain: chainStr,
+      ...action ? { action } : {},
+      approvalTxArgs: { chain: chainStr, tx: approveLeg },
+      txArgs: { chain: chainStr, tx: mainLeg }
+    };
+  }
+  return { __buildTx: true, chain: chainStr, ...action ? { action } : {}, tx: legs[0] };
+}
 function deriveToolOutputCandidate(toolName, output) {
   if (CLI_SIGNABLE_FLAT_TOOLS.has(toolName)) {
     const payload = buildTxReadyFromToolOutput(toolName, output);
     return payload ? { payload, source: "flat", toolName } : null;
   }
+  if (CLI_SIGNABLE_YIELD_TOOLS.has(toolName)) {
+    const payload = buildTxReadyFromYieldOutput(toolName, output);
+    return payload ? { payload, source: "yield", toolName } : null;
+  }
   if (CLI_SIGNABLE_PREP_TOOLS.has(toolName)) {
     const env = asRecord(output);
     if (!env || env.status === "error" || "error" in env) return null;
@@ -12713,7 +12909,8 @@ var AgentClient = class {
   maybeSignToolOutput(status, toolName, output, callbacks, v1Type) {
     if (v1Type === "tool-output-error") return;
     if (status !== "done" || !toolName || !callbacks.onToolOutputTx) return;
-    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName)) return;
+    if (!CLI_SIGNABLE_FLAT_TOOLS.has(toolName) && !CLI_SIGNABLE_PREP_TOOLS.has(toolName) && !CLI_SIGNABLE_YIELD_TOOLS.has(toolName))
+      return;
     const candidate = deriveToolOutputCandidate(toolName, output);
     if (!candidate) return;
     if (this.verbose)
@@ -15082,7 +15279,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.21.1";
+    cachedVersion = "2.23.0";
     return cachedVersion;
   }
   try {
@@ -16479,7 +16676,7 @@ Error: ${error2.message}`));
     const [fromChainStr, toChainStr, amountStr, ...rest] = args;
     const fromChain = findChainByName(fromChainStr) || fromChainStr;
     const toChain = findChainByName(toChainStr) || toChainStr;
-    const amount = parseFloat(amountStr);
+    const amount = amountStr;
     let fromToken;
     let toToken;
     for (let i = 0; i < rest.length; i++) {
@@ -16505,7 +16702,7 @@ Error: ${error2.message}`));
     const [fromChainStr, toChainStr, amountStr, ...rest] = args;
     const fromChain = findChainByName(fromChainStr) || fromChainStr;
     const toChain = findChainByName(toChainStr) || toChainStr;
-    const amount = parseFloat(amountStr);
+    const amount = amountStr;
     let fromToken;
     let toToken;
     let slippage;
@@ -17508,7 +17705,7 @@ Examples:
       await executeSwapQuote(context, {
         fromChain,
         toChain,
-        amount: options.max ? "max" : parseFloat(amountStr),
+        amount: options.max ? "max" : amountStr,
         fromToken: options.fromToken,
         toToken: options.toToken
       });
@@ -17533,7 +17730,7 @@ See also: swap-quote, swap-chains, balance`
       await executeSwap(context, {
         fromChain: findChainByName(fromChainStr) || fromChainStr,
         toChain: findChainByName(toChainStr) || toChainStr,
-        amount: options.max ? "max" : parseFloat(amountStr),
+        amount: options.max ? "max" : amountStr,
         fromToken: options.fromToken,
         toToken: options.toToken,
         slippage: options.slippage ? parseFloat(options.slippage) : void 0,