@vultisig/cli 2.23.0 → 3.0.0

package/CHANGELOG.md

@@ -1,5 +1,66 @@
 # @vultisig/cli
 
+## 3.0.0
+
+### Minor Changes
+
+- [#1606](https://github.com/vultisig/vultisig-sdk/pull/1606) [`c593ba0`](https://github.com/vultisig/vultisig-sdk/commit/c593ba0693f6a02402aac0912a97d9e36e8efad0) Thanks [@neavra](https://github.com/neavra)! - Make token references resolve consistently across the vault and CLI surfaces.
+
+  **`@vultisig/sdk` — consumer-visible behaviour change on `send`, `swap` and `balance`:**
+
+  - A token reference (the `symbol` on `send`/`swap`, the `tokenId` on `balance`)
+    now resolves by contract address / stored vault token id as well as by symbol
+    or well-known ticker, through one shared resolver. Previously `send` matched
+    by symbol only while `balance` treated the same value as a raw contract
+    address, so no single value worked on both paths and an ERC-20 send could not
+    be built at all.
+  - The change is additive. Symbol/ticker is still matched first and the vault's
+    own tokens still shadow the well-known registry, so every reference that
+    resolved before resolves to the same token and produces the same signed
+    payload. Only references that previously threw now resolve. A reference
+    matching nothing is still passed through to the balance layer untouched.
+  - `send({ dryRun: true })` gains `feeSymbol` and reports the network fee in the
+    chain's native asset. For a token send, `fee` was previously formatted with
+    the token's decimals and `total` was amount + fee — both meaningless when the
+    fee is paid in a different asset. `total` is now denominated in the asset
+    being sent. Native sends are unaffected.
+  - A `Balance` for a token is labelled by the same resolution. Previously the
+    token was found by an exact match against the vault's stored token id, so a
+    well-known token the vault does not track — or one added with an id that is
+    not its bare contract address — fell through to a default of 18 decimals with
+    the raw id as `symbol`. `formatBalance` now resolves the same way everything
+    else does; a token in no registry still falls back as before.
+
+  **`@vultisig/cli`:**
+
+  - `send --token` works with either a contract address or a symbol, and its
+    dry-run preview quotes the fee in the native asset. The preview also warns
+    separately when the native balance cannot cover the fee — a token send draws
+    its fee from a different balance than the one `total` is checked against.
+  - `portfolio`'s total now equals the sum of the breakdown printed under it, with
+    each held token itemized as its own row (`chainBalances[].tokens`).
+  - `balance <chain> --tokens` returns token balances instead of silently
+    ignoring the flag; without the flag the output is unchanged.
+  - `tokens --discover` documents that it saves discovered tokens to the vault.
+
+### Patch Changes
+
+- [#1174](https://github.com/vultisig/vultisig-sdk/pull/1174) [`0d73d9f`](https://github.com/vultisig/vultisig-sdk/commit/0d73d9f5d08b10e52b9461678d7d700afba52e01) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Fix CLI shell completion so vault suggestions read the SDK's real storage layout and honor `VULTISIG_CONFIG_DIR`.
+
+- [#1163](https://github.com/vultisig/vultisig-sdk/pull/1163) [`286e342`](https://github.com/vultisig/vultisig-sdk/commit/286e342962e8fa63525c8de25bed84295fd468cd) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Promote THOR/Maya swap-memo parsing into the public SDK API and update the CLI executor to consume the shared helper.
+
+- [#1165](https://github.com/vultisig/vultisig-sdk/pull/1165) [`f3fd265`](https://github.com/vultisig/vultisig-sdk/commit/f3fd2654b8d90f5d5aaa3c578fcd5fad752203d3) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Re-export the RN-safe `parseChain`, `parseTicker`, and `knownContracts` helpers from `@vultisig/sdk/platforms/react-native` so mobile consumers can use the SDK's canonical public helpers without maintaining local copies or reaching into non-RN entrypoints.
+
+- [#1171](https://github.com/vultisig/vultisig-sdk/pull/1171) [`a24771a`](https://github.com/vultisig/vultisig-sdk/commit/a24771afba7c210423c586f9492d3531cdcd47f5) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Make the SDK's default Node/Electron `FileStorage` honor `VULTISIG_CONFIG_DIR` so default vault storage stays co-located with the CLI config, credentials, cache, and broadcast journal paths.
+
+- [#1168](https://github.com/vultisig/vultisig-sdk/pull/1168) [`e40aab2`](https://github.com/vultisig/vultisig-sdk/commit/e40aab24e02c46fd2c3fe95873b14aad4fd2fe6d) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Consolidate `VULTISIG_CONFIG_DIR` resolution into a shared helper so empty or whitespace-only overrides consistently fall back to the default config directory across credentials, config storage, token cache, and broadcast journal paths.
+
+- Updated dependencies [[`8061f30`](https://github.com/vultisig/vultisig-sdk/commit/8061f3072cc299196894b3c118bf7046eff8a004), [`4c76c50`](https://github.com/vultisig/vultisig-sdk/commit/4c76c507df970c6bbb1542c72a7ab0e06d039e65), [`bb752e2`](https://github.com/vultisig/vultisig-sdk/commit/bb752e25dc318488a72d9b6b7aa8d484c568dbaa), [`0d73d9f`](https://github.com/vultisig/vultisig-sdk/commit/0d73d9f5d08b10e52b9461678d7d700afba52e01), [`ec4aac7`](https://github.com/vultisig/vultisig-sdk/commit/ec4aac78e96db00cae283fe8a506983a30c42412), [`286e342`](https://github.com/vultisig/vultisig-sdk/commit/286e342962e8fa63525c8de25bed84295fd468cd), [`c593ba0`](https://github.com/vultisig/vultisig-sdk/commit/c593ba0693f6a02402aac0912a97d9e36e8efad0), [`d1ed4bb`](https://github.com/vultisig/vultisig-sdk/commit/d1ed4bbd459bfed006cf9f319d9e39356ffe25b9), [`648d932`](https://github.com/vultisig/vultisig-sdk/commit/648d932b7e3c6f3c30ff7007f3c4e4387879ba38), [`f3fd265`](https://github.com/vultisig/vultisig-sdk/commit/f3fd2654b8d90f5d5aaa3c578fcd5fad752203d3), [`a24771a`](https://github.com/vultisig/vultisig-sdk/commit/a24771afba7c210423c586f9492d3531cdcd47f5), [`6763ddb`](https://github.com/vultisig/vultisig-sdk/commit/6763ddbd382bd71cdf9f24bbd3bde0116a694906), [`e40aab2`](https://github.com/vultisig/vultisig-sdk/commit/e40aab24e02c46fd2c3fe95873b14aad4fd2fe6d), [`259837f`](https://github.com/vultisig/vultisig-sdk/commit/259837f482717624d6422797e088a9341d4f1a23)]:
+  - @vultisig/core-chain@2.29.2
+  - @vultisig/sdk@3.0.0
+  - @vultisig/client-shared@0.3.1
+  - @vultisig/rujira@57.0.0
+
 ## 2.23.0
 
 ### Patch Changes

package/dist/index.js

@@ -5855,12 +5855,20 @@ function displayPortfolio(portfolio, currency, _raw = false) {
   printResult(chalk2.cyan("|  ") + chalk2.bold.green(totalDisplay) + chalk2.cyan("  |"));
   printResult(chalk2.cyan("+----------------------------------------+\n"));
   printResult(chalk2.bold("Chain Breakdown:\n"));
-  const table = portfolio.chainBalances.map(({ chain, balance, value }) => ({
-    Chain: chain,
-    Amount: balance.formattedAmount,
-    Symbol: balance.symbol,
-    Value: value ? `${value.amount} ${value.currency.toUpperCase()}` : "N/A"
-  }));
+  const table = portfolio.chainBalances.flatMap(({ chain, balance, value, tokens }) => [
+    {
+      Chain: chain,
+      Amount: balance.formattedAmount,
+      Symbol: balance.symbol,
+      Value: value ? `${value.amount} ${value.currency.toUpperCase()}` : "N/A"
+    },
+    ...(tokens ?? []).map((token) => ({
+      Chain: chain,
+      Amount: token.balance?.formattedAmount ?? "-",
+      Symbol: token.balance?.symbol ?? token.tokenId,
+      Value: `${token.value.amount} ${token.value.currency.toUpperCase()}`
+    }))
+  ]);
   printTable(table);
 }
 function displayAddresses(addresses) {
@@ -6085,6 +6093,16 @@ async function executeBalance(ctx2, options = {}) {
   const spinner = createSpinner("Loading balances...");
   const raw = options.raw ?? false;
   if (options.chain) {
+    if (options.includeTokens) {
+      const balances = await vault.balances([options.chain], true);
+      spinner.succeed("Balances loaded");
+      if (isJsonOutput()) {
+        outputJson({ chain: options.chain, balances });
+        return;
+      }
+      displayBalancesTable(balances, raw);
+      return;
+    }
     const balance = await vault.balance(options.chain);
     spinner.succeed("Balance loaded");
     if (isJsonOutput()) {
@@ -6115,7 +6133,6 @@ async function executePortfolio(ctx2, options = {}) {
   }
   const currencyName = fiatCurrencyNameRecord2[currency];
   const spinner = createSpinner(`Loading portfolio in ${currencyName}...`);
-  const totalValue = await vault.getTotalValue(currency);
   const chains = vault.chains;
   const results = await Promise.all(
     chains.map(async (chain) => {
@@ -6125,12 +6142,34 @@ async function executePortfolio(ctx2, options = {}) {
       } catch (err) {
         return { failure: { chain, stage: "balance", error: conciseError(err) } };
       }
+      let values;
       try {
-        const value = await vault.getValue(chain, void 0, currency);
-        return { entry: { chain, balance, value } };
+        values = await vault.getValues(chain, currency);
       } catch (err) {
         return { entry: { chain, balance }, failure: { chain, stage: "value", error: conciseError(err) } };
       }
+      const { native, ...tokenValues } = values;
+      if (!native) {
+        try {
+          const retried = await vault.getValue(chain, void 0, currency);
+          return { entry: { chain, balance, value: retried, tokens: await withAmounts(tokenValues) } };
+        } catch (err) {
+          return {
+            entry: { chain, balance, tokens: await withAmounts(tokenValues) },
+            failure: { chain, stage: "value", error: conciseError(err) }
+          };
+        }
+      }
+      return { entry: { chain, balance, value: native, tokens: await withAmounts(tokenValues) } };
+      async function withAmounts(byTokenId) {
+        return Promise.all(
+          Object.entries(byTokenId).map(async ([tokenId, value]) => ({
+            tokenId,
+            value,
+            balance: await vault.balance(chain, tokenId).catch(() => void 0)
+          }))
+        );
+      }
     })
   );
   const chainBalances = [];
@@ -6147,6 +6186,11 @@ async function executePortfolio(ctx2, options = {}) {
       ["Check your internet connection", "Retry in a few moments"]
     );
   }
+  const total = chainBalances.reduce(
+    (sum, entry) => sum + parseFloat(entry.value?.amount ?? "0") + (entry.tokens ?? []).reduce((tokenSum, token) => tokenSum + parseFloat(token.value.amount), 0),
+    0
+  );
+  const totalValue = { amount: total.toFixed(2), currency, lastUpdated: Date.now() };
   const portfolio = { totalValue, chainBalances };
   spinner.succeed("Portfolio loaded");
   if (isJsonOutput()) {
@@ -6324,8 +6368,8 @@ import {
   writeFileSync,
   writeSync
 } from "node:fs";
-import { homedir } from "node:os";
 import { dirname, join } from "node:path";
+import { getVultisigConfigDir } from "@vultisig/client-shared";
 
 // src/agent/agentErrors.ts
 import { VaultError as VaultError2, VaultErrorCode as VaultErrorCode2, VaultImportError as VaultImportError2, VaultImportErrorCode as VaultImportErrorCode2 } from "@vultisig/sdk";
@@ -6560,8 +6604,7 @@ function nowMs() {
 function journalPath() {
   const explicit = process.env.VULTISIG_BROADCAST_JOURNAL_PATH;
   if (explicit && explicit.trim()) return explicit;
-  const dir = process.env.VULTISIG_CONFIG_DIR && process.env.VULTISIG_CONFIG_DIR.trim() ? process.env.VULTISIG_CONFIG_DIR : join(homedir(), ".vultisig");
-  return join(dir, "broadcasts.jsonl");
+  return join(getVultisigConfigDir(), "broadcasts.jsonl");
 }
 function normalize(v, canonicalizeEmptyCalldata = false) {
   const normalized = (v ?? "").trim().toLowerCase();
@@ -7289,7 +7332,7 @@ async function discoverTokens(ctx2, chain) {
     });
   }
   const allTokens = vault.getTokens(chain);
-  spinner.succeed(`Discovered ${newTokens.length} new token(s) on ${chain}`);
+  spinner.succeed(`Now tracking ${newTokens.length} new token(s) on ${chain}`);
   if (isJsonOutput()) {
     outputJson({
       chain,
@@ -7306,6 +7349,9 @@ async function discoverTokens(ctx2, chain) {
     printResult(`  ${d.ticker} (${d.contractAddress})`);
   }
   info(chalk4.gray(`
+Saved to this vault \u2014 tracked tokens count toward portfolio and balance --tokens.`));
+  info(chalk4.gray(`Use --remove <tokenId> to stop tracking one.`));
+  info(chalk4.gray(`
 ${allTokens.length} total token(s) tracked on ${chain}`));
 }
 async function listTokens(ctx2, chain) {
@@ -7378,6 +7424,51 @@ async function executeSend(ctx2, params) {
   }
   return sendTransaction(vault, params);
 }
+async function previewDryRun(vault, params, dryResult, to, destinationTag) {
+  const balance = await vault.balance(params.chain, params.tokenId);
+  const hasInsufficientBalance = parseFloat(dryResult.total) > parseFloat(balance.formattedAmount);
+  const isTokenSend = balance.tokenId !== void 0;
+  const feeBalance = isTokenSend ? await vault.balance(params.chain).catch(() => void 0) : void 0;
+  const warnings = [];
+  if (hasInsufficientBalance) {
+    warnings.push(`Insufficient balance: you have ${balance.formattedAmount} ${balance.symbol}`);
+  }
+  if (isTokenSend && feeBalance === void 0) {
+    warnings.push(`Could not check your ${dryResult.feeSymbol} balance for the network fee`);
+  } else if (feeBalance && parseFloat(dryResult.fee) > parseFloat(feeBalance.formattedAmount)) {
+    warnings.push(
+      `Insufficient ${dryResult.feeSymbol} for the network fee: you have ${feeBalance.formattedAmount} ${dryResult.feeSymbol}, the fee is ${dryResult.fee}`
+    );
+  }
+  const result = {
+    dryRun: true,
+    chain: params.chain,
+    to,
+    amount: params.amount,
+    symbol: balance.symbol,
+    fee: dryResult.fee,
+    feeSymbol: dryResult.feeSymbol,
+    total: dryResult.total,
+    balance: balance.formattedAmount,
+    destinationTag,
+    ...warnings.length > 0 ? { warning: warnings.join(". ") } : {}
+  };
+  if (isJsonOutput()) {
+    outputJson(result);
+    return result;
+  }
+  info(`
+Dry-run preview:`);
+  info(`  Chain:   ${result.chain}`);
+  info(`  To:      ${result.to}`);
+  info(`  Amount:  ${result.amount} ${result.symbol}`);
+  if (result.destinationTag !== void 0) info(`  Destination tag: ${result.destinationTag}`);
+  info(`  Fee:     ${result.fee} ${result.feeSymbol}`);
+  info(`  Total:   ${result.total} ${result.symbol}`);
+  info(`  Balance: ${result.balance} ${result.symbol}`);
+  if (result.warning) warn(`  Warning: ${result.warning}`);
+  return result;
+}
 async function sendTransaction(vault, params) {
   if (!params.dryRun && !params.yes && isNonInteractive()) {
     throw new ConfirmationRequiredError(
@@ -7406,37 +7497,7 @@ async function sendTransaction(vault, params) {
   prepareSpinner.succeed("Transaction prepared");
   if (!dryResult.dryRun) throw new Error("unreachable");
   if (params.dryRun) {
-    const balance2 = await vault.balance(params.chain, params.tokenId);
-    const hasInsufficientBalance = parseFloat(dryResult.total) > parseFloat(balance2.formattedAmount);
-    const result = {
-      dryRun: true,
-      chain: params.chain,
-      to,
-      amount: params.amount,
-      symbol: balance2.symbol,
-      fee: dryResult.fee,
-      total: dryResult.total,
-      balance: balance2.formattedAmount,
-      destinationTag
-    };
-    if (hasInsufficientBalance) {
-      result.warning = `Insufficient balance: you have ${balance2.formattedAmount} ${balance2.symbol}`;
-    }
-    if (isJsonOutput()) {
-      outputJson(result);
-    } else {
-      info(`
-Dry-run preview:`);
-      info(`  Chain:   ${result.chain}`);
-      info(`  To:      ${result.to}`);
-      info(`  Amount:  ${result.amount} ${result.symbol}`);
-      if (result.destinationTag !== void 0) info(`  Destination tag: ${result.destinationTag}`);
-      info(`  Fee:     ${result.fee} ${result.symbol}`);
-      info(`  Total:   ${result.total} ${result.symbol}`);
-      info(`  Balance: ${result.balance} ${result.symbol}`);
-      if (result.warning) warn(`  Warning: ${result.warning}`);
-    }
-    return result;
+    return previewDryRun(vault, params, dryResult, to, destinationTag);
   }
   let gas;
   try {
@@ -10358,6 +10419,7 @@ import {
   Chain as Chain11,
   chainFeeCoin,
   getChainKind as getChainKind3,
+  parseThorSwapMemo,
   resolveChainReference,
   VaultError as VaultError3,
   VaultErrorCode as VaultErrorCode3,
@@ -10367,7 +10429,7 @@ import {
 // src/core/VaultStateStore.ts
 import * as fs3 from "node:fs";
 import * as path3 from "node:path";
-import { getVultisigConfigDir } from "@vultisig/client-shared";
+import { getVultisigConfigDir as getVultisigConfigDir2 } from "@vultisig/client-shared";
 var LOCK_STALE_MS = 6e4;
 var LOCK_RETRY_INIT_MS = 100;
 var LOCK_MAX_WAIT_MS = 3e4;
@@ -10379,7 +10441,7 @@ var VaultStateStore = class {
     if (!safeId) {
       throw new Error("Invalid vaultId: must contain alphanumeric characters");
     }
-    this.baseDir = path3.join(getVultisigConfigDir(), "vault-state", safeId);
+    this.baseDir = path3.join(getVultisigConfigDir2(), "vault-state", safeId);
     fs3.mkdirSync(this.baseDir, { recursive: true });
   }
   // -------------------------------------------------------------------------
@@ -10520,45 +10582,6 @@ function sleep2(ms) {
 }
 
 // src/agent/executor.ts
-var THOR_MEMO_CHAIN_TO_ENUM = {
-  BTC: Chain11.Bitcoin,
-  ETH: Chain11.Ethereum,
-  BSC: Chain11.BSC,
-  AVAX: Chain11.Avalanche,
-  BASE: Chain11.Base,
-  // L2 — THORChain routinely quotes Base destinations (PR #439 review finding 1)
-  ARB: Chain11.Arbitrum,
-  // L1-via-bridge path (PR #439 review finding 1)
-  BCH: Chain11.BitcoinCash,
-  LTC: Chain11.Litecoin,
-  DOGE: Chain11.Dogecoin,
-  GAIA: Chain11.Cosmos,
-  THOR: Chain11.THORChain,
-  RUNE: Chain11.THORChain,
-  XRP: Chain11.Ripple,
-  DASH: Chain11.Dash,
-  ZEC: Chain11.Zcash,
-  MAYA: Chain11.MayaChain,
-  CACAO: Chain11.MayaChain
-};
-var THOR_MEMO_ASSET_SHORTCUTS = {
-  b: "BTC.BTC",
-  e: "ETH.ETH",
-  s: "BSC.BNB",
-  a: "AVAX.AVAX",
-  c: "BCH.BCH",
-  l: "LTC.LTC",
-  d: "DOGE.DOGE",
-  g: "GAIA.ATOM",
-  r: "THOR.RUNE",
-  x: "XRP.XRP",
-  cacao: "MAYA.CACAO",
-  dash: "DASH.DASH",
-  zec: "ZEC.ZEC"
-  // BASE / ARB don't have documented single-letter shortcuts; THORChain
-  // emits these as the full CHAIN.ASSET form in memos. Listed in
-  // THOR_MEMO_CHAIN_TO_ENUM only.
-};
 var EVM_CHAINS = /* @__PURE__ */ new Set([
   "Ethereum",
   "BSC",
@@ -11219,13 +11242,7 @@ var AgentExecutor = class {
     const txArgs = serverTxData?.txArgs ?? {};
     const memo = typeof txArgs.memo === "string" ? txArgs.memo : "";
     const parsed = parseThorSwapMemo(memo);
-    const toChain = THOR_MEMO_CHAIN_TO_ENUM[parsed.destChainCode];
-    if (!toChain) {
-      throw new VaultError3(
-        VaultErrorCode3.UnsupportedChain,
-        `signThorMsgDepositSwap: unsupported destination chain code '${parsed.destChainCode}' in memo '${memo}'.`
-      );
-    }
+    const toChain = parsed.toChain;
     const vaultDestAddress = await this.vault.address(toChain);
     const normalizeForCompare = (addr) => EVM_CHAINS.has(toChain) ? addr.toLowerCase() : addr;
     if (parsed.destAddress && normalizeForCompare(parsed.destAddress) !== normalizeForCompare(vaultDestAddress)) {
@@ -12034,31 +12051,6 @@ function parseNonEvmEnvelope(serverTxData, chain) {
   const memo = typeof txArgs.memo === "string" && txArgs.memo.length > 0 ? txArgs.memo : void 0;
   return { chain, to, amount: amountDecimal, symbol, memo };
 }
-function parseThorSwapMemo(memo) {
-  if (!memo.startsWith("=:")) {
-    throw new VaultError3(
-      VaultErrorCode3.NotImplemented,
-      `parseThorSwapMemo: only swap memos (=:CHAIN.ASSET:DEST...) supported on this path; got memo='${memo}'. LP memos (+:/-:) route through signThorMsgDepositLp; loan / validator ops out of scope.`
-    );
-  }
-  const memoBody = memo.slice(2);
-  const parts = memoBody.split(":");
-  let chainAsset = parts[0];
-  if (chainAsset && !chainAsset.includes(".")) {
-    const expanded = THOR_MEMO_ASSET_SHORTCUTS[chainAsset.toLowerCase()];
-    if (expanded) chainAsset = expanded;
-  }
-  if (!chainAsset || !chainAsset.includes(".")) {
-    throw new VaultError3(
-      VaultErrorCode3.InvalidConfig,
-      `parseThorSwapMemo: malformed swap memo '${memo}': missing CHAIN.ASSET in first segment.`
-    );
-  }
-  const [destChainCode, destAssetRaw] = chainAsset.split(".");
-  const destAsset = destAssetRaw?.split("-")[0] ?? "";
-  const destAddress = typeof parts[1] === "string" ? parts[1] : "";
-  return { destChainCode, destAsset, destAddress };
-}
 function resolveChainId(chainId) {
   return resolveChainReference(chainId) ?? null;
 }
@@ -13495,13 +13487,13 @@ import {
   statSync as statSync3,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { homedir } from "node:os";
 import { dirname as dirname2, join as join3 } from "node:path";
 var LOCK_RETRY_MS = 25;
 var LOCK_MAX_WAIT_MS2 = 5e3;
 var LOCK_STALE_MS2 = 3e4;
 function getTokenCachePath() {
-  const dir = process.env.VULTISIG_CONFIG_DIR ?? join3(homedir2(), ".vultisig");
+  const dir = process.env.VULTISIG_CONFIG_DIR ?? join3(homedir(), ".vultisig");
   return join3(dir, "agent-tokens.json");
 }
 function tokenCacheKey(scope) {
@@ -15271,7 +15263,7 @@ function formatDate(iso) {
 }
 
 // src/lib/version.ts
-import { getVultisigConfigDir as getVultisigConfigDir2 } from "@vultisig/client-shared";
+import { getVultisigConfigDir as getVultisigConfigDir3 } from "@vultisig/client-shared";
 import chalk11 from "chalk";
 import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
 import { join as join4 } from "path";
@@ -15279,7 +15271,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "2.23.0";
+    cachedVersion = "3.0.0";
     return cachedVersion;
   }
   try {
@@ -15292,7 +15284,7 @@ function getVersion() {
     return cachedVersion;
   }
 }
-var CACHE_DIR = join4(getVultisigConfigDir2(), "cache");
+var CACHE_DIR = join4(getVultisigConfigDir3(), "cache");
 var VERSION_CACHE_FILE = join4(CACHE_DIR, "version-check.json");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 function readVersionCache() {
@@ -15376,7 +15368,7 @@ function formatVersionShort() {
 }
 function formatVersionDetailed() {
   const lines = [];
-  const configDir = getVultisigConfigDir2();
+  const configDir = getVultisigConfigDir3();
   lines.push(chalk11.bold(`Vultisig CLI v${getVersion()}`));
   lines.push("");
   lines.push(`  Node.js:   ${process.version}`);
@@ -16816,10 +16808,10 @@ Error: ${error2.message}`));
 };
 
 // src/lib/completion.ts
+import { getVultisigConfigDir as getVultisigConfigDir4 } from "@vultisig/client-shared";
 import { SUPPORTED_CHAINS as SUPPORTED_CHAINS2 } from "@vultisig/sdk";
 import { program } from "commander";
 import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir3 } from "os";
 import { join as join5 } from "path";
 var tabtab = null;
 async function getTabtab() {
@@ -16843,7 +16835,7 @@ function getChains() {
 }
 function getVaultNames() {
   try {
-    const vaultDir = join5(homedir3(), ".vultisig", "vaults");
+    const vaultDir = getVultisigConfigDir4();
     if (!existsSync3(vaultDir)) return [];
     const files = readdirSync(vaultDir);
     const names = [];
@@ -16851,9 +16843,10 @@ function getVaultNames() {
       if (file.startsWith("vault:") && file.endsWith(".json")) {
         try {
           const content = readFileSync5(join5(vaultDir, file), "utf-8");
-          const vault = JSON.parse(content);
-          if (vault.name) names.push(vault.name);
-          if (vault.id) names.push(vault.id);
+          const parsed = JSON.parse(content);
+          const vault = parsed?.value ?? parsed;
+          if (vault?.name) names.push(vault.name);
+          if (vault?.id) names.push(vault.id);
         } catch {
         }
       }
@@ -17095,12 +17088,10 @@ complete -c vsig -n "__fish_seen_subcommand_from import export" -a "(__fish_comp
 }
 
 // src/lib/config.ts
+import { getVultisigConfigDir as getVultisigConfigDir5 } from "@vultisig/client-shared";
 import { FileStorage } from "@vultisig/sdk/node";
-import { homedir as homedir4 } from "os";
-import { join as join6 } from "path";
 function getConfigDir() {
-  const override = process.env.VULTISIG_CONFIG_DIR?.trim();
-  return override ? override : join6(homedir4(), ".vultisig");
+  return getVultisigConfigDir5();
 }
 function createVaultStorage() {
   return new FileStorage({ basePath: getConfigDir() });
@@ -17658,9 +17649,13 @@ program2.command("delete [vault]").description("Delete a vault from local storag
     });
   })
 );
-program2.command("tokens <chain>").description("List and manage tokens for a chain").option("--add <contractAddress>", "Add a token by contract address").option("--remove <tokenId>", "Remove a token by ID").option("--discover", "Auto-discover tokens with balances on the chain").addHelpText(
+program2.command("tokens <chain>").description("List and manage tokens for a chain").option("--add <contractAddress>", "Add a token by contract address").option("--remove <tokenId>", "Remove a token by ID").option("--discover", "Find tokens with balances on the chain and save them to this vault").addHelpText(
   "after",
   `
+--discover writes to the vault: every token it finds is saved to the tracked
+list, so it also changes what portfolio and balance --tokens report. Use
+--remove <tokenId> to stop tracking one.
+
 Examples:
   vultisig tokens Ethereum
   vultisig tokens Ethereum --discover --output json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "2.23.0",
+  "version": "3.0.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -73,10 +73,10 @@
     "@cosmjs/stargate": "^0.39.0",
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
-    "@vultisig/client-shared": "^0.3.0",
-    "@vultisig/core-chain": "^2.29.1",
-    "@vultisig/rujira": "^56.0.0",
-    "@vultisig/sdk": "^2.23.0",
+    "@vultisig/client-shared": "^0.3.1",
+    "@vultisig/core-chain": "^2.29.2",
+    "@vultisig/rujira": "^57.0.0",
+    "@vultisig/sdk": "^3.0.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",