@vultisig/cli 3.0.0 → 4.0.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @vultisig/cli
 
+## 4.0.0
+
+### Minor Changes
+
+- [#1608](https://github.com/vultisig/vultisig-sdk/pull/1608) [`791d344`](https://github.com/vultisig/vultisig-sdk/commit/791d344c2dacc289c9fb7fbcbc38488aeeb47542) Thanks [@neavra](https://github.com/neavra)! - Fix tracked token balance fetching and make token removal report the truth.
+
+  A token added with `tokens --add` is stored under an id of the form `<Chain>-<address>`. That id was passed to the RPC as if it were a contract address; the RPC rejected it, the throw was swallowed per-chain, and the **whole chain's balances disappeared** — native asset included — leaving only a `console.warn`. Balance lookups now resolve a stored token reference to its real contract address / chain-level asset id before both the per-coin and batched calls. What is written to the vault file is unchanged, and balance result keys still use the stored id.
+
+  **Behavior change — `tokens --remove` now fails when nothing was removed.** Removal previously matched on an exact id comparison, so removing by symbol (or by contract address for a token added under the prefixed id form) matched nothing while the command still printed `Removed token …` and exited 0. Removal now goes through the shared token resolver, and a reference that matches no tracked token raises the existing not-found error and exits **5** (`RESOURCE_NOT_FOUND`) instead of exiting 0. A script that removed an untracked token and relied on a zero exit will now see a failure. Removal by symbol and by contract address, which previously silently no-op'd, now work.
+
+  **Behavior change — the agent `vault_coin remove` tool reports per-coin outcomes.** It previously returned `removed: true` unconditionally; it now returns the SDK's actual result, so the model is told when a coin was not tracked. Batch removals return `{ chain, tokenId, removed }` per coin rather than `{ chain, tokenId }`.
+
+  **Breaking SDK API change — `VaultBase.removeToken` now returns `Promise<boolean>` instead of `Promise<void>`.** It resolves to `true` when a tracked token was removed and persisted, and `false` when the reference matched nothing. Consumers with callbacks, interfaces, or overrides typed to the previous `Promise<void>` signature must update those types.
+
+### Patch Changes
+
+- [#1642](https://github.com/vultisig/vultisig-sdk/pull/1642) [`ac5becb`](https://github.com/vultisig/vultisig-sdk/commit/ac5becb7939bc8c6b45d04cd00067e0d2caf6297) Thanks [@neavra](https://github.com/neavra)! - Show the user-visible memo and XRP destination tag from the signable transaction payload in both send dry-run and pre-signing confirmation previews, with terminal-safe dry-run rendering.
+
+- Updated dependencies [[`b9f81af`](https://github.com/vultisig/vultisig-sdk/commit/b9f81af9065a5c0bfc2f86f8fb20aa51e670ab77), [`c0e260f`](https://github.com/vultisig/vultisig-sdk/commit/c0e260f89d159d14b170384864b24b101b23dfb0), [`2ef8f3f`](https://github.com/vultisig/vultisig-sdk/commit/2ef8f3f42f5d44673568b39a91c42bd0fe410311), [`791d344`](https://github.com/vultisig/vultisig-sdk/commit/791d344c2dacc289c9fb7fbcbc38488aeeb47542)]:
+  - @vultisig/core-chain@2.31.0
+  - @vultisig/sdk@4.0.0
+  - @vultisig/client-shared@0.3.2
+  - @vultisig/rujira@59.0.0
+
+## 3.1.0
+
+### Patch Changes
+
+- Updated dependencies [[`645e291`](https://github.com/vultisig/vultisig-sdk/commit/645e2917aa1b6cd58c5599ddb32b1c89fa73e20e), [`9436de6`](https://github.com/vultisig/vultisig-sdk/commit/9436de627b4d123d7f9bb76e4981722cd84266d1)]:
+  - @vultisig/core-chain@2.30.0
+  - @vultisig/sdk@3.1.0
+  - @vultisig/rujira@58.0.0
+
 ## 3.0.0
 
 ### Minor Changes

package/dist/index.js

@@ -5828,6 +5828,12 @@ import { fiatCurrencies, fiatCurrencyNameRecord as fiatCurrencyNameRecord2 } fro
 // src/ui.ts
 import { fiatCurrencyNameRecord, fromChainAmountExact, Vultisig } from "@vultisig/sdk";
 import chalk2 from "chalk";
+var escapeTerminalControls = (value) => Array.from(value, (character) => {
+  if (character === "\\") return "\\\\";
+  const codePoint = character.codePointAt(0) ?? 0;
+  const isTerminalControl = codePoint <= 31 || codePoint === 127 || codePoint >= 128 && codePoint <= 159;
+  return isTerminalControl ? `\\x${codePoint.toString(16).padStart(2, "0").toUpperCase()}` : character;
+}).join("");
 function displayBalance(chain, balance, _raw = false) {
   printResult(chalk2.cyan(`
 ${chain} Balance:`));
@@ -5933,7 +5939,7 @@ Estimated gas: ${JSON.stringify(gas, bigIntReplacer2, 2)}`));
   printResult(`  Amount: ${amount} ${symbol}`);
   printResult(`  Chain:  ${chain}`);
   if (memo) {
-    printResult(`  Memo:   ${memo}`);
+    printResult(`  Memo:   ${escapeTerminalControls(memo)}`);
   }
   if (destinationTag !== void 0) {
     printResult(`  Destination tag: ${destinationTag}`);
@@ -6244,7 +6250,8 @@ var EthereumL2Chain = {
   Blast: "Blast",
   Optimism: "Optimism",
   Zksync: "Zksync",
-  Mantle: "Mantle"
+  Mantle: "Mantle",
+  Robinhood: "Robinhood"
 };
 var EvmChain = {
   ...EthereumL2Chain,
@@ -6323,6 +6330,7 @@ var chainKindRecord = {
   [EvmChain.Mantle]: "evm",
   [EvmChain.Hyperliquid]: "evm",
   [EvmChain.Sei]: "evm",
+  [EvmChain.Robinhood]: "evm",
   [UtxoChain.Bitcoin]: "utxo",
   [UtxoChain.BitcoinCash]: "utxo",
   [UtxoChain.Litecoin]: "utxo",
@@ -7296,7 +7304,10 @@ async function addToken(ctx2, options) {
 }
 async function removeToken(ctx2, chain, tokenId) {
   const vault = await ctx2.ensureActiveVault();
-  await vault.removeToken(chain, tokenId);
+  const removed = await vault.removeToken(chain, tokenId);
+  if (!removed) {
+    throw new TokenNotFoundError(`Token "${tokenId}" not found on ${chain}`);
+  }
   success(`
 + Removed token ${tokenId} from ${chain}`);
 }
@@ -7411,8 +7422,57 @@ var normalizeRippleDestination = (address) => {
   return { address: value };
 };
 
+// ../../packages/core/mpc/dist/keysign/error.js
+var BuildKeysignPayloadError = class extends Error {
+  type;
+  constructor(type, message = type) {
+    super(message);
+    this.type = type;
+    this.name = "BuildKeysignPayloadError";
+  }
+};
+
+// ../../packages/core/mpc/dist/keysign/utils/rippleDestinationTag.js
+var maxRippleDestinationTag = 4294967295;
+var getLegacyDestinationTag = (memo) => {
+  if (!memo || !/^(0|[1-9]\d*)$/.test(memo))
+    return void 0;
+  const destinationTag = Number(memo);
+  return destinationTag <= maxRippleDestinationTag ? destinationTag : void 0;
+};
+var validateDestinationTag = (destinationTag) => {
+  if (!Number.isInteger(destinationTag) || destinationTag < 0 || destinationTag > maxRippleDestinationTag) {
+    throw new BuildKeysignPayloadError("ripple-destination-tag-invalid", `Invalid XRP destination tag: expected an integer between 0 and ${maxRippleDestinationTag}`);
+  }
+  return destinationTag;
+};
+var resolveDestinationTag = ({ destinationTag, memo }) => {
+  if (destinationTag !== void 0)
+    return validateDestinationTag(destinationTag);
+  return getLegacyDestinationTag(memo);
+};
+
 // src/commands/transaction.ts
 import { Chain as Chain4, Vultisig as Vultisig2 } from "@vultisig/sdk";
+var getSendPreviewDetails = (chain, keysignPayload) => {
+  let memo = keysignPayload.memo || void 0;
+  if (chain !== Chain4.Ripple) {
+    return { memo, destinationTag: void 0 };
+  }
+  const rippleSpecific = keysignPayload.blockchainSpecific;
+  if (rippleSpecific.case !== "rippleSpecific") {
+    throw new Error("Ripple send payload is missing Ripple-specific data");
+  }
+  const destinationTag = resolveDestinationTag({
+    destinationTag: rippleSpecific.value.destinationTag,
+    memo
+  });
+  const legacyMemoDestinationTag = getLegacyDestinationTag(memo);
+  if (legacyMemoDestinationTag !== void 0 && legacyMemoDestinationTag === destinationTag) {
+    memo = void 0;
+  }
+  return { memo, destinationTag };
+};
 async function executeSend(ctx2, params) {
   const vault = await ctx2.ensureActiveVault();
   if (!Object.values(Chain4).includes(params.chain)) {
@@ -7424,9 +7484,13 @@ async function executeSend(ctx2, params) {
   }
   return sendTransaction(vault, params);
 }
-async function previewDryRun(vault, params, dryResult, to, destinationTag) {
+async function previewDryRun(vault, params, dryResult, to) {
   const balance = await vault.balance(params.chain, params.tokenId);
   const hasInsufficientBalance = parseFloat(dryResult.total) > parseFloat(balance.formattedAmount);
+  const { memo: previewMemo, destinationTag: payloadDestinationTag } = getSendPreviewDetails(
+    params.chain,
+    dryResult.keysignPayload
+  );
   const isTokenSend = balance.tokenId !== void 0;
   const feeBalance = isTokenSend ? await vault.balance(params.chain).catch(() => void 0) : void 0;
   const warnings = [];
@@ -7450,7 +7514,8 @@ async function previewDryRun(vault, params, dryResult, to, destinationTag) {
     feeSymbol: dryResult.feeSymbol,
     total: dryResult.total,
     balance: balance.formattedAmount,
-    destinationTag,
+    destinationTag: payloadDestinationTag,
+    ...previewMemo ? { memo: previewMemo } : {},
     ...warnings.length > 0 ? { warning: warnings.join(". ") } : {}
   };
   if (isJsonOutput()) {
@@ -7463,6 +7528,7 @@ Dry-run preview:`);
   info(`  To:      ${result.to}`);
   info(`  Amount:  ${result.amount} ${result.symbol}`);
   if (result.destinationTag !== void 0) info(`  Destination tag: ${result.destinationTag}`);
+  if (result.memo) info(`  Memo:    ${escapeTerminalControls(result.memo)}`);
   info(`  Fee:     ${result.fee} ${result.feeSymbol}`);
   info(`  Total:   ${result.total} ${result.symbol}`);
   info(`  Balance: ${result.balance} ${result.symbol}`);
@@ -7497,7 +7563,7 @@ async function sendTransaction(vault, params) {
   prepareSpinner.succeed("Transaction prepared");
   if (!dryResult.dryRun) throw new Error("unreachable");
   if (params.dryRun) {
-    return previewDryRun(vault, params, dryResult, to, destinationTag);
+    return previewDryRun(vault, params, dryResult, to);
   }
   let gas;
   try {
@@ -7508,14 +7574,15 @@ async function sendTransaction(vault, params) {
   const balance = await vault.balance(params.chain, params.tokenId);
   if (!isJsonOutput()) {
     const address = await vault.address(params.chain);
+    const preview = getSendPreviewDetails(params.chain, dryResult.keysignPayload);
     displayTransactionPreview(
       address,
       to,
       dryResult.total,
       balance.symbol,
       params.chain,
-      params.memo,
-      destinationTag,
+      preview.memo,
+      preview.destinationTag,
       gas
     );
   }
@@ -11028,8 +11095,8 @@ var AgentExecutor = class {
             `vault_coin remove: missing contract_address for ${t.ticker || t.symbol || "coin"} on ${t.chain}`
           );
         }
-        await this.vault.removeToken(chain2, tokenId2);
-        results.push({ chain: chain2.toString(), tokenId: tokenId2 });
+        const removed2 = await this.vault.removeToken(chain2, tokenId2);
+        results.push({ chain: chain2.toString(), tokenId: tokenId2, removed: removed2 });
       }
       return { removed: results };
     }
@@ -11040,8 +11107,8 @@ var AgentExecutor = class {
     if (!tokenId) {
       throw new Error(`vault_coin remove: missing contract_address for coin on ${chainName}`);
     }
-    await this.vault.removeToken(chain, tokenId);
-    return { chain: chain.toString(), removed: true };
+    const removed = await this.vault.removeToken(chain, tokenId);
+    return { chain: chain.toString(), removed };
   }
   async removeChain(_toolCallId, input) {
     return this.runTool("remove_chain", () => this.removeChainImpl(input));
@@ -14883,6 +14950,13 @@ function summarizeData(data) {
     return `tx: ${data.tx_hash.slice(0, 12)}...`;
   }
   if (data.added) return "added";
+  if (Array.isArray(data.removed)) {
+    const entries = data.removed;
+    const removed = entries.filter((entry) => entry.removed).length;
+    if (removed === 0) return "not tracked";
+    return removed === entries.length ? "removed" : `removed ${removed}/${entries.length}`;
+  }
+  if (data.removed === false) return "not tracked";
   if (data.removed) return "removed";
   if (data.message) return data.message;
   return "";
@@ -15271,7 +15345,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "3.0.0";
+    cachedVersion = "4.0.0";
     return cachedVersion;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -73,10 +73,10 @@
     "@cosmjs/stargate": "^0.39.0",
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
-    "@vultisig/client-shared": "^0.3.1",
-    "@vultisig/core-chain": "^2.29.2",
-    "@vultisig/rujira": "^57.0.0",
-    "@vultisig/sdk": "^3.0.0",
+    "@vultisig/client-shared": "^0.3.2",
+    "@vultisig/core-chain": "^2.31.0",
+    "@vultisig/rujira": "^59.0.0",
+    "@vultisig/sdk": "^4.0.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",
@@ -94,6 +94,7 @@
     "@types/node": "^26.1.1",
     "@types/tabtab": "^3.0.4",
     "@types/ws": "^8.18.1",
+    "@vultisig/core-mpc": "^1.16.0",
     "esbuild": "^0.28.1",
     "ethers": "^6.17.0",
     "node-pty": "^1.1.0",