@vultisig/cli 6.3.0 → 7.2.0

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @vultisig/cli
 
+## 7.2.0
+
+### Patch Changes
+
+- [#2321](https://github.com/vultisig/vultisig-sdk/pull/2321) [`f45627f`](https://github.com/vultisig/vultisig-sdk/commit/f45627f7a986a3491c4586363acbfbdaa5f6b9c3) Thanks [@rcoderdev](https://github.com/rcoderdev)! - Decode modern and legacy Cosmos governance votes into a lossless action-specific shared envelope.
+
+- Updated dependencies [[`f45627f`](https://github.com/vultisig/vultisig-sdk/commit/f45627f7a986a3491c4586363acbfbdaa5f6b9c3), [`fd7507a`](https://github.com/vultisig/vultisig-sdk/commit/fd7507af5d9dc14938da80372bc3c1a8ec02a459), [`a5def09`](https://github.com/vultisig/vultisig-sdk/commit/a5def098e06cf7269174eb6840dc516d78ec55f9), [`bcca32c`](https://github.com/vultisig/vultisig-sdk/commit/bcca32c885066e2bf224aa37d6666c68a3684956), [`052f2e3`](https://github.com/vultisig/vultisig-sdk/commit/052f2e3b56509c1ddc2bcc14f21d0d1a5ee5d674), [`231070e`](https://github.com/vultisig/vultisig-sdk/commit/231070ea811a79a84b43a98fadd80c2811071c94)]:
+  - @vultisig/sdk@7.2.0
+  - @vultisig/core-chain@5.2.0
+
+## 7.0.0
+
+### Patch Changes
+
+- [#2295](https://github.com/vultisig/vultisig-sdk/pull/2295) [`27dfd44`](https://github.com/vultisig/vultisig-sdk/commit/27dfd44fe6002d84c6f1e57ed0729ec22303a749) Thanks [@neavra](https://github.com/neavra)! - Refresh EIP-1559 priority fees immediately before CLI signing so zero-tip transactions use the live RPC suggestion, respect canonical per-chain minimums, and never exceed `maxFeePerGas`. Broadcast rejection messages now retain the actionable RPC reason without exposing the signed raw transaction.
+
+- [#1996](https://github.com/vultisig/vultisig-sdk/pull/1996) [`a56c7cb`](https://github.com/vultisig/vultisig-sdk/commit/a56c7cb2b1bcfa74edcee0ae7e5552f830804734) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - Export the `ChainDiscoveryAggregate` type from the public SDK seedphrase and root entrypoints so consumers can import the aggregate result returned by seedphrase discovery without restating the contract locally.
+
+- [#2307](https://github.com/vultisig/vultisig-sdk/pull/2307) [`42fd134`](https://github.com/vultisig/vultisig-sdk/commit/42fd1349b52fec44a5a0f47a898ad1537ac6ff60) Thanks [@rcoderdev](https://github.com/rcoderdev)! - Refresh stale raw EVM server nonces from pending RPC state immediately before signing.
+
+- [#2294](https://github.com/vultisig/vultisig-sdk/pull/2294) [`a3e1415`](https://github.com/vultisig/vultisig-sdk/commit/a3e1415758077867343de920af5bec36f2f89b11) Thanks [@neavra](https://github.com/neavra)! - Route pipe-mode confirmation and password replies around the serialized message queue so signable agent turns can complete.
+
+- [#2318](https://github.com/vultisig/vultisig-sdk/pull/2318) [`26a83ed`](https://github.com/vultisig/vultisig-sdk/commit/26a83ed417c9543f9c92d28cbb1bd35f0f914817) Thanks [@rcoderdev](https://github.com/rcoderdev)! - Fix TRON transaction lifecycle safety across fee preparation, status polling, and broadcast. Native TRX bandwidth estimates now measure the WalletCore-serialized signed transaction including memo bytes, default transaction times use the fetched block timestamp, expired raw transactions terminate polling, and successful broadcasts must return the deterministic local transaction hash.
+
+- Updated dependencies [[`27dfd44`](https://github.com/vultisig/vultisig-sdk/commit/27dfd44fe6002d84c6f1e57ed0729ec22303a749), [`1b3fb49`](https://github.com/vultisig/vultisig-sdk/commit/1b3fb498ad3f78b84b92b9f09b41fe8956fc5e9a), [`a56c7cb`](https://github.com/vultisig/vultisig-sdk/commit/a56c7cb2b1bcfa74edcee0ae7e5552f830804734), [`bd15294`](https://github.com/vultisig/vultisig-sdk/commit/bd15294a739c7977b26704b7b6df38e83e6bda23), [`7d4c116`](https://github.com/vultisig/vultisig-sdk/commit/7d4c116cc7a940e96abf075790c4a387edd03987), [`7b65284`](https://github.com/vultisig/vultisig-sdk/commit/7b65284f7fe73f538283a201a416efdbbda0830c), [`1716a79`](https://github.com/vultisig/vultisig-sdk/commit/1716a7946bf617ff16f8bb15f33b279efbb4a87d), [`a711b6c`](https://github.com/vultisig/vultisig-sdk/commit/a711b6ca8a8a7ae39d0efbb1c919b23b6538a1b8), [`ef6a8bb`](https://github.com/vultisig/vultisig-sdk/commit/ef6a8bb0007c6576179e5a8cb10aa47820075b57), [`26a83ed`](https://github.com/vultisig/vultisig-sdk/commit/26a83ed417c9543f9c92d28cbb1bd35f0f914817), [`4978c02`](https://github.com/vultisig/vultisig-sdk/commit/4978c02f08521600fc70fa6b4753bae5a589371b), [`8a2c126`](https://github.com/vultisig/vultisig-sdk/commit/8a2c126333bb1010cf859eef6a4876e7a20da18f), [`b19c5d5`](https://github.com/vultisig/vultisig-sdk/commit/b19c5d56f4d00d92493f8da74ff80d92b1d87c68)]:
+  - @vultisig/sdk@7.0.0
+  - @vultisig/core-chain@5.0.0
+  - @vultisig/rujira@71.0.0
+  - @vultisig/client-shared@0.3.6
+
 ## 6.3.0
 
 ### Patch Changes

package/dist/index.js

@@ -8130,7 +8130,7 @@ var require_dist = __commonJS({
 import "dotenv/config";
 import { promises as fs4 } from "node:fs";
 import { descriptions } from "@vultisig/client-shared";
-import { Chain as Chain14, parseKeygenQR, Vultisig as Vultisig6 } from "@vultisig/sdk";
+import { Chain as Chain15, parseKeygenQR, Vultisig as Vultisig6 } from "@vultisig/sdk";
 import chalk16 from "chalk";
 import { InvalidArgumentError, program as program2 } from "commander";
 
@@ -11487,7 +11487,7 @@ function resolveTxStatusParams(params) {
 }
 var POLL_INTERVAL_MS = 5e3;
 var DEFAULT_TIMEOUT_SEC = 120;
-var isTerminal = (status) => status === "success" || status === "error";
+var isTerminal = (status) => status === "success" || status === "error" || status === "expired";
 function resolveTimeoutMs(timeoutSec) {
   if (typeof timeoutSec !== "number" || !Number.isFinite(timeoutSec)) {
     return DEFAULT_TIMEOUT_SEC * 1e3;
@@ -11527,7 +11527,7 @@ async function executeTxStatus(ctx2, params, opts = {}) {
     }
     if (result.status === "success") {
       recordResolution(params.txHash, "confirmed");
-    } else if (result.status === "error") {
+    } else if (result.status === "error" || result.status === "expired") {
       recordResolution(params.txHash, "failed");
     }
     spinner.succeed(`Transaction status: ${toCliStatus(result.status)}`);
@@ -14046,9 +14046,104 @@ import { randomUUID } from "node:crypto";
 // src/agent/toolOutputSigning.ts
 import { getChainKind as getChainKind5 } from "@vultisig/sdk";
 
+// ../../packages/core/chain/dist/Chain.js
+var EthereumL2Chain = {
+  Arbitrum: "Arbitrum",
+  Base: "Base",
+  Blast: "Blast",
+  Optimism: "Optimism",
+  Zksync: "Zksync",
+  Mantle: "Mantle",
+  Robinhood: "Robinhood"
+};
+var EvmChain = {
+  ...EthereumL2Chain,
+  Avalanche: "Avalanche",
+  CronosChain: "CronosChain",
+  BSC: "BSC",
+  Ethereum: "Ethereum",
+  Polygon: "Polygon",
+  Hyperliquid: "Hyperliquid",
+  Sei: "Sei"
+};
+var UtxoChain;
+(function(UtxoChain2) {
+  UtxoChain2["Bitcoin"] = "Bitcoin";
+  UtxoChain2["BitcoinCash"] = "Bitcoin-Cash";
+  UtxoChain2["Litecoin"] = "Litecoin";
+  UtxoChain2["Dogecoin"] = "Dogecoin";
+  UtxoChain2["Dash"] = "Dash";
+  UtxoChain2["Zcash"] = "Zcash";
+})(UtxoChain || (UtxoChain = {}));
+var cosmosChainsByKind = {
+  ibcEnabled: {
+    Cosmos: "Cosmos",
+    Osmosis: "Osmosis",
+    Dydx: "Dydx",
+    Terra: "Terra",
+    TerraClassic: "TerraClassic",
+    Noble: "Noble",
+    Akash: "Akash"
+  },
+  vaultBased: {
+    THORChain: "THORChain",
+    MayaChain: "MayaChain"
+  }
+};
+var IbcEnabledCosmosChain = cosmosChainsByKind.ibcEnabled;
+var VaultBasedCosmosChain = cosmosChainsByKind.vaultBased;
+var CosmosChain = {
+  ...IbcEnabledCosmosChain,
+  ...VaultBasedCosmosChain
+};
+var OtherChain;
+(function(OtherChain2) {
+  OtherChain2["Sui"] = "Sui";
+  OtherChain2["Solana"] = "Solana";
+  OtherChain2["Polkadot"] = "Polkadot";
+  OtherChain2["Bittensor"] = "Bittensor";
+  OtherChain2["Ton"] = "Ton";
+  OtherChain2["Ripple"] = "Ripple";
+  OtherChain2["Tron"] = "Tron";
+  OtherChain2["Cardano"] = "Cardano";
+  OtherChain2["QBTC"] = "QBTC";
+})(OtherChain || (OtherChain = {}));
+var Chain10 = {
+  ...EvmChain,
+  ...UtxoChain,
+  ...CosmosChain,
+  ...OtherChain
+};
+var UtxoBasedChain = [...Object.values(UtxoChain), OtherChain.Cardano];
+var defaultChains = [Chain10.Bitcoin, Chain10.Ethereum, Chain10.THORChain, Chain10.Solana, Chain10.BSC];
+
+// ../../packages/core/chain/dist/chains/evm/tx/fee/index.js
+var evmChainTxFeeFormat = {
+  [EvmChain.Arbitrum]: "enveloped",
+  [EvmChain.Base]: "enveloped",
+  [EvmChain.Blast]: "enveloped",
+  [EvmChain.Optimism]: "enveloped",
+  [EvmChain.Zksync]: "enveloped",
+  [EvmChain.Avalanche]: "enveloped",
+  [EvmChain.CronosChain]: "enveloped",
+  [EvmChain.BSC]: "legacy",
+  [EvmChain.Ethereum]: "enveloped",
+  [EvmChain.Polygon]: "enveloped",
+  [EvmChain.Mantle]: "enveloped",
+  [EvmChain.Hyperliquid]: "enveloped",
+  // Sei must stay 'enveloped': iOS (EVMHelper.setGasParameters) and Android
+  // (EthereumGasHelper.setGasParameters) sign every EVM chain except BSC as
+  // EIP-1559. A different tx mode changes the pre-signing hash and therefore
+  // the relay message_id, so extension<->mobile Sei co-signing deadlocks
+  // (vultisig-windows#4369).
+  [EvmChain.Sei]: "enveloped",
+  [EvmChain.Robinhood]: "enveloped"
+};
+
 // src/agent/executor.ts
 import {
-  Chain as Chain11,
+  Chain as Chain12,
+  clampEvmPriorityFee,
   computeEip712Hash,
   getChainKind as getChainKind4,
   getEvmRpcUrl,
@@ -14220,7 +14315,7 @@ function sleep2(ms) {
 
 // src/agent/hlOrder.ts
 var import_msgpack = __toESM(require_dist(), 1);
-import { Chain as Chain10 } from "@vultisig/sdk";
+import { Chain as Chain11 } from "@vultisig/sdk";
 var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
 var HL_AGENT_TYPES = {
   Agent: [
@@ -14371,7 +14466,7 @@ async function validateRequestBinding(payload, expected, vault, now) {
   if (typeof payload.owner_public_key !== "string") throw new Error("HL_INVALID_OWNER_PUBLIC_KEY");
   if (payload.owner_public_key.toLowerCase() !== expected.publicKey.toLowerCase()) throw new Error("HL_OWNER_MISMATCH");
   if (typeof payload.vault_address !== "string") throw new Error("HL_INVALID_VAULT_ADDRESS");
-  const localAddress = await vault.address(Chain10.Ethereum);
+  const localAddress = await vault.address(Chain11.Ethereum);
   if (payload.vault_address.toLowerCase() !== localAddress.toLowerCase()) throw new Error("HL_VAULT_ADDRESS_MISMATCH");
   if (typeof payload.expires_at !== "string") throw new Error("HL_INVALID_EXPIRY");
   const expiry = Date.parse(payload.expires_at);
@@ -14464,6 +14559,11 @@ var EVM_CHAINS = /* @__PURE__ */ new Set([
 ]);
 var ERC20_TRANSFER_SELECTOR = "0xa9059cbb";
 var ERC20_TRANSFER_ABI = parseAbi(["function transfer(address to, uint256 value)"]);
+var changedByMoreThanHalf = (before, after) => {
+  if (before === after) return false;
+  const difference = before > after ? before - after : after - before;
+  return difference * 2n > before;
+};
 function decodeErc20Transfer(calldata) {
   if (calldata.slice(0, ERC20_TRANSFER_SELECTOR.length).toLowerCase() !== ERC20_TRANSFER_SELECTOR) return null;
   try {
@@ -14709,12 +14809,12 @@ var AgentExecutor = class {
       if (this.vault.isEncrypted && !this.vault.isUnlocked?.() && this.password) {
         await this.vault.unlock?.(this.password);
       }
-      const expectedAddress = await this.vault.address(Chain11.Ethereum);
+      const expectedAddress = await this.vault.address(Chain12.Ethereum);
       const signatures = [];
       for (const step of payload.steps) {
         const signed = await this.vault.signBytes({
           data: step.digest,
-          chain: Chain11.Ethereum
+          chain: Chain12.Ethereum
         });
         const canonical = toCanonicalEvmSignature(signed.signature, signed.recovery ?? 0);
         const v = canonical.recovery + 27;
@@ -14889,7 +14989,7 @@ var AgentExecutor = class {
     if (!nestedTx && txReadyData && typeof txReadyData === "object") {
       const txArgs = txReadyData.txArgs;
       if (txArgs && typeof txArgs === "object" && typeof txArgs.to === "string" && typeof txArgs.amount === "string") {
-        const chain2 = resolveChainFromTxReady(txReadyData) || Chain11.Ethereum;
+        const chain2 = resolveChainFromTxReady(txReadyData) || Chain12.Ethereum;
         if (getChainKind4(chain2) !== "evm") {
           this.pendingPayloads.clear();
           this.pendingLegs = [];
@@ -14914,7 +15014,7 @@ var AgentExecutor = class {
 `);
       return false;
     }
-    const chain = resolveChainFromTxReady(txReadyData) || Chain11.Ethereum;
+    const chain = resolveChainFromTxReady(txReadyData) || Chain12.Ethereum;
     this.pendingPayloads.clear();
     this.pendingLegs = [];
     this.pendingPayloads.set("latest", {
@@ -15572,8 +15672,9 @@ var AgentExecutor = class {
           nonce: swapTx.nonce
         }
       });
-      await this.patchEvmNonce(chain, keysignPayload);
+      const nonceGraceAge = Date.now() - (this.evmLastBroadcast.get(chain.toString()) ?? 0);
       await this.patchEvmGas(chain, keysignPayload);
+      await this.patchEvmNonce(chain, keysignPayload, nonceGraceAge);
       const messageHashes = await this.vault.extractMessageHashes(keysignPayload);
       const signature = await this.vault.sign(
         {
@@ -15825,33 +15926,45 @@ var AgentExecutor = class {
     }
   }
   /**
-   * Patch the EVM nonce in a keysign payload if our local state is ahead of on-chain.
-   * The payload's blockchainSpecific.ethereumSpecific.nonce was set from RPC during
-   * prepareSendTx(). If we have locally-tracked pending txs, we override with a higher value.
+   * Refresh the EVM nonce from pending RPC state, then patch it if our local state
+   * is further ahead. Raw server envelopes may carry a nonce that became stale
+   * before signing, so the RPC refresh must not depend on local state existing.
    *
    * Also detects evicted txs: if local state claims a higher nonce but there are
    * no pending txs in the mempool (pending == latest), the intermediate txs were
    * dropped and local state is stale.
    */
-  async patchEvmNonce(chain, payload) {
-    if (!this.stateStore || !isEvmChain(chain)) return;
+  async patchEvmNonce(chain, payload, capturedBroadcastAge) {
+    if (!isEvmChain(chain)) return;
     const bs = payload.blockchainSpecific;
     if (!bs || bs.case !== "ethereumSpecific") return;
-    const rpcNonce = bs.value.nonce;
+    const recentBroadcastAge = capturedBroadcastAge ?? Date.now() - (this.evmLastBroadcast.get(chain.toString()) ?? 0);
+    const hasRecentBroadcast = recentBroadcastAge < 3e4;
+    const payloadNonce = bs.value.nonce;
+    const latestNonce = this.stateStore && !hasRecentBroadcast ? await this.fetchEvmLatestNonce(chain) : null;
+    const pendingNonce = await this.fetchEvmPendingNonce(chain);
+    const rpcNonce = [payloadNonce, latestNonce, pendingNonce].reduce(
+      (highest, nonce) => nonce !== null && nonce > highest ? nonce : highest,
+      payloadNonce
+    );
+    if (rpcNonce !== payloadNonce) {
+      bs.value.nonce = rpcNonce;
+      if (this.verbose) process.stderr.write(`[nonce] Refreshed ${chain} nonce: ${payloadNonce} \u2192 ${rpcNonce}
+`);
+    }
+    if (!this.stateStore) return;
     const nextNonce = this.stateStore.getNextEvmNonce(chain, rpcNonce);
     if (nextNonce !== rpcNonce) {
-      const lastBroadcast = this.evmLastBroadcast.get(chain.toString()) ?? 0;
-      if (Date.now() - lastBroadcast < 3e4) {
+      if (hasRecentBroadcast) {
         if (this.verbose)
           process.stderr.write(
-            `[nonce] Keeping local nonce ${nextNonce} for ${chain} (broadcast ${Date.now() - lastBroadcast}ms ago)
+            `[nonce] Keeping local nonce ${nextNonce} for ${chain} (broadcast ${recentBroadcastAge}ms ago)
 `
           );
         bs.value.nonce = nextNonce;
         return;
       }
-      const pendingNonce = await this.fetchEvmPendingNonce(chain);
-      if (pendingNonce !== null && pendingNonce === rpcNonce) {
+      if (latestNonce !== null && pendingNonce === latestNonce) {
         if (this.verbose)
           process.stderr.write(
             `[nonce] Stale local state for ${chain}: local=${nextNonce}, on-chain=${rpcNonce}, no pending txs \u2014 using on-chain nonce
@@ -15861,7 +15974,8 @@ var AgentExecutor = class {
         return;
       }
       const nonceGap = nextNonce - rpcNonce;
-      if (pendingNonce === null && nonceGap > 3n) {
+      const pendingStateVerified = pendingNonce !== null && latestNonce !== null && pendingNonce >= latestNonce;
+      if (!pendingStateVerified && nonceGap > 3n) {
         process.stderr.write(
           `[nonce] Warning: pending nonce was not verified for ${chain}; signing will continue with on-chain nonce ${rpcNonce} because the local gap is ${nonceGap}
 `
@@ -15870,7 +15984,7 @@ var AgentExecutor = class {
         return;
       }
       bs.value.nonce = nextNonce;
-      if (pendingNonce === null) {
+      if (!pendingStateVerified) {
         process.stderr.write(
           `[nonce] Warning: pending nonce was not verified for ${chain}; signing will continue with local nonce ${nextNonce}
 `
@@ -15889,7 +16003,51 @@ var AgentExecutor = class {
     if (!isEvmChain(chain)) return;
     const bs = payload.blockchainSpecific;
     if (!bs || bs.case !== "ethereumSpecific") return;
+    const isEip1559 = evmChainTxFeeFormat[chain] === "enveloped";
+    if (!isEip1559) return;
     const rpcUrl = getEvmRpcUrl(chain);
+    const currentPriorityFee = BigInt(bs.value.priorityFee || "0");
+    const currentMaxFee = BigInt(bs.value.maxFeePerGasWei || "0");
+    const baseFee = await this.fetchEvmBaseFee(chain, rpcUrl);
+    let priorityFee = currentPriorityFee;
+    if (currentPriorityFee > 0n) {
+      priorityFee = clampEvmPriorityFee(chain, currentPriorityFee);
+      if (priorityFee < currentPriorityFee) {
+        process.stderr.write(
+          `[gas] Warning: ${chain} maxPriorityFeePerGas ${currentPriorityFee} exceeded the safety ceiling; clamped to ${priorityFee}
+`
+        );
+      }
+    } else {
+      const rpcPriorityFee = await this.fetchEvmPriorityFee(rpcUrl);
+      const baseFeeFallback = baseFee === null ? 0n : baseFee / 10n;
+      const fallbackPriorityFee = baseFeeFallback < 2000000000n ? baseFeeFallback : 2000000000n;
+      priorityFee = clampEvmPriorityFee(chain, rpcPriorityFee > 0n ? rpcPriorityFee : fallbackPriorityFee);
+    }
+    const minMaxFee = baseFee === null ? priorityFee : baseFee * 25n / 10n + priorityFee;
+    const patchedMaxFee = currentMaxFee < minMaxFee ? minMaxFee : currentMaxFee;
+    if (priorityFee !== currentPriorityFee) {
+      bs.value.priorityFee = priorityFee.toString();
+      if (this.verbose)
+        process.stderr.write(`[gas] Patched ${chain} maxPriorityFeePerGas: ${currentPriorityFee} \u2192 ${priorityFee}
+`);
+    }
+    if (currentMaxFee < patchedMaxFee) {
+      bs.value.maxFeePerGasWei = patchedMaxFee.toString();
+      if (this.verbose)
+        process.stderr.write(
+          `[gas] Bumped ${chain} maxFeePerGas: ${currentMaxFee} \u2192 ${patchedMaxFee} (baseFee=${baseFee ?? "unavailable"})
+`
+        );
+    }
+    if (changedByMoreThanHalf(currentPriorityFee, priorityFee) || changedByMoreThanHalf(currentMaxFee, patchedMaxFee)) {
+      process.stderr.write(
+        `[gas] Notice: ${chain} fees adjusted after confirmation: maxPriorityFeePerGas ${currentPriorityFee} \u2192 ${priorityFee}, maxFeePerGas ${currentMaxFee} \u2192 ${patchedMaxFee}
+`
+      );
+    }
+  }
+  async fetchEvmBaseFee(chain, rpcUrl) {
     try {
       const res = await fetch(rpcUrl, {
         method: "POST",
@@ -15906,24 +16064,33 @@ var AgentExecutor = class {
       if (!res.ok || data?.error || data?.result?.baseFeePerGas === void 0 || data?.result?.baseFeePerGas === null) {
         throw new Error(`Failed to fetch current base fee for ${chain}`);
       }
-      const baseFee = BigInt(data.result.baseFeePerGas);
-      if (baseFee === 0n) return;
-      const currentPriorityFee = BigInt(bs.value.priorityFee || "0");
-      const currentMaxFee = BigInt(bs.value.maxFeePerGasWei || "0");
-      const minMaxFee = baseFee * 25n / 10n + currentPriorityFee;
-      if (currentMaxFee < minMaxFee) {
-        bs.value.maxFeePerGasWei = minMaxFee.toString();
-        if (this.verbose)
-          process.stderr.write(
-            `[gas] Bumped ${chain} maxFeePerGas: ${currentMaxFee} \u2192 ${minMaxFee} (baseFee=${baseFee})
-`
-          );
-      }
+      return BigInt(data.result.baseFeePerGas);
     } catch {
       process.stderr.write(
         `[gas] Warning: gas estimate was not refreshed for ${chain}; signing will continue with the original estimate
 `
       );
+      return null;
+    }
+  }
+  async fetchEvmPriorityFee(rpcUrl) {
+    try {
+      const res = await fetch(rpcUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          jsonrpc: "2.0",
+          method: "eth_maxPriorityFeePerGas",
+          params: [],
+          id: 2
+        }),
+        signal: AbortSignal.timeout(5e3)
+      });
+      const data = await res.json();
+      if (!res.ok || data?.error || data?.result === void 0) return 0n;
+      return BigInt(data.result);
+    } catch {
+      return 0n;
     }
   }
   /**
@@ -15931,6 +16098,16 @@ var AgentExecutor = class {
    * Returns null if the RPC call fails (non-fatal).
    */
   async fetchEvmPendingNonce(chain) {
+    return this.fetchEvmNonce(chain, "pending");
+  }
+  /**
+   * Fetch the confirmed nonce from RPC (eth_getTransactionCount with "latest" tag).
+   * Returns null if the RPC call fails (non-fatal).
+   */
+  async fetchEvmLatestNonce(chain) {
+    return this.fetchEvmNonce(chain, "latest");
+  }
+  async fetchEvmNonce(chain, blockTag) {
     if (!isEvmChain(chain)) return null;
     const rpcUrl = getEvmRpcUrl(chain);
     try {
@@ -15941,7 +16118,7 @@ var AgentExecutor = class {
         body: JSON.stringify({
           jsonrpc: "2.0",
           method: "eth_getTransactionCount",
-          params: [address, "pending"],
+          params: [address, blockTag],
           id: 1
         }),
         signal: AbortSignal.timeout(5e3)
@@ -16041,11 +16218,11 @@ var AgentExecutor = class {
 `);
     const chainName = params.chain;
     const chainId = domain.chainId;
-    let chain = Chain11.Ethereum;
+    let chain = Chain12.Ethereum;
     if (chainName) {
-      chain = resolveChain(chainName) || Chain11.Ethereum;
+      chain = resolveChain(chainName) || Chain12.Ethereum;
     } else if (chainId) {
-      chain = resolveChainId(chainId) || Chain11.Ethereum;
+      chain = resolveChainId(chainId) || Chain12.Ethereum;
     }
     const sigResult = await this.vault.signBytes({
       data: eip712Hash,
@@ -17379,7 +17556,9 @@ var PipeInterface = class {
   session;
   rl = null;
   stopped = false;
+  inputClosed = false;
   pendingPasswordResolve = null;
+  pendingPasswordReject = null;
   pendingConfirmResolve = null;
   constructor(session) {
     this.session = session;
@@ -17411,38 +17590,45 @@ var PipeInterface = class {
         }))
       });
     }
-    const lines = [];
+    const commands = [];
     let inputDone = false;
     let processing = false;
     this.rl.on("line", async (line) => {
       const trimmed = line.trim();
       if (!trimmed) return;
-      lines.push(trimmed);
+      let cmd;
+      try {
+        cmd = JSON.parse(trimmed);
+      } catch {
+        this.emitInvalidInput("Malformed JSON input");
+        return;
+      }
+      if (cmd?.type === "confirm" || cmd?.type === "password") {
+        this.handleControlCommand(cmd);
+        return;
+      }
+      commands.push(cmd);
       if (!processing) {
         processing = true;
-        while (lines.length > 0) {
-          const nextLine = lines.shift();
+        while (commands.length > 0) {
+          const nextCommand = commands.shift();
           try {
-            const cmd = JSON.parse(nextLine);
-            await this.handleCommand(cmd);
+            await this.handleCommand(nextCommand);
           } catch (err) {
-            const { message, code } = normalizeAgentError(err);
-            this.emit({
-              type: "error",
-              message: `Invalid input: ${message}`,
-              code: code === "UNKNOWN_ERROR" /* UNKNOWN_ERROR */ ? "INVALID_INPUT" /* INVALID_INPUT */ : code
-            });
+            this.emitInvalidInput(err);
           }
         }
         processing = false;
-        if (inputDone && lines.length === 0) {
+        if (inputDone && commands.length === 0) {
           this.stop();
         }
       }
     });
     this.rl.on("close", () => {
+      this.inputClosed = true;
       inputDone = true;
-      if (!processing && lines.length === 0) {
+      this.settlePendingPrompts("Password input closed before a reply was received");
+      if (!processing && commands.length === 0) {
         this.stop();
       }
     });
@@ -17522,17 +17708,30 @@ var PipeInterface = class {
       onDone: () => {
         this.emit({ type: "done" });
       },
-      requestPassword: async () => {
-        return new Promise((resolve) => {
+      requestPassword: () => {
+        if (this.inputClosed) {
+          const password2 = Promise.reject(
+            Object.assign(new Error("Password input closed before a reply was received"), {
+              code: "PASSWORD_REQUIRED" /* PASSWORD_REQUIRED */
+            })
+          );
+          void password2.catch(() => void 0);
+          return password2;
+        }
+        const password = new Promise((resolve, reject) => {
           this.pendingPasswordResolve = resolve;
+          this.pendingPasswordReject = reject;
           this.emit({
             type: "error",
             message: "PASSWORD_REQUIRED",
             code: "PASSWORD_REQUIRED" /* PASSWORD_REQUIRED */
           });
         });
+        void password.catch(() => void 0);
+        return password;
       },
       requestConfirmation: async (message) => {
+        if (this.inputClosed) return false;
         return new Promise((resolve) => {
           this.pendingConfirmResolve = resolve;
           this.emit({
@@ -17554,21 +17753,14 @@ var PipeInterface = class {
           const { message, code } = normalizeAgentError(err);
           this.emit({ type: "error", message, code });
           this.emit({ type: "done" });
+        } finally {
+          this.settlePendingPrompts("Password request cancelled because the turn ended");
         }
         break;
       }
-      case "password": {
-        if (this.pendingPasswordResolve) {
-          this.pendingPasswordResolve(cmd.password);
-          this.pendingPasswordResolve = null;
-        }
-        break;
-      }
+      case "password":
       case "confirm": {
-        if (this.pendingConfirmResolve) {
-          this.pendingConfirmResolve(cmd.confirmed);
-          this.pendingConfirmResolve = null;
-        }
+        this.handleControlCommand(cmd);
         break;
       }
       default:
@@ -17579,6 +17771,54 @@ var PipeInterface = class {
         });
     }
   }
+  handleControlCommand(cmd) {
+    if (cmd.type === "password") {
+      if (!this.pendingPasswordResolve) {
+        this.emitInvalidInput("No pending password request for this reply");
+        return;
+      }
+      if (typeof cmd.password !== "string") {
+        this.emitInvalidInput("Password reply must contain a string password");
+        return;
+      }
+      const resolve2 = this.pendingPasswordResolve;
+      this.pendingPasswordResolve = null;
+      this.pendingPasswordReject = null;
+      resolve2(cmd.password);
+      return;
+    }
+    if (!this.pendingConfirmResolve) {
+      this.emitInvalidInput("No pending confirmation for this reply");
+      return;
+    }
+    if (cmd.confirmed !== true && cmd.confirmed !== false) {
+      this.emitInvalidInput("Confirmation reply must contain a boolean confirmed value");
+      return;
+    }
+    const resolve = this.pendingConfirmResolve;
+    this.pendingConfirmResolve = null;
+    resolve(cmd.confirmed === true);
+  }
+  settlePendingPrompts(passwordMessage) {
+    const confirmResolve = this.pendingConfirmResolve;
+    this.pendingConfirmResolve = null;
+    confirmResolve?.(false);
+    const passwordReject = this.pendingPasswordReject;
+    this.pendingPasswordResolve = null;
+    this.pendingPasswordReject = null;
+    if (passwordReject) {
+      const error2 = Object.assign(new Error(passwordMessage), { code: "PASSWORD_REQUIRED" /* PASSWORD_REQUIRED */ });
+      passwordReject(error2);
+    }
+  }
+  emitInvalidInput(err) {
+    const { message, code } = normalizeAgentError(err);
+    this.emit({
+      type: "error",
+      message: `Invalid input: ${message}`,
+      code: code === "UNKNOWN_ERROR" /* UNKNOWN_ERROR */ ? "INVALID_INPUT" /* INVALID_INPUT */ : code
+    });
+  }
   emit(event) {
     process.stdout.write(JSON.stringify(event) + "\n");
   }
@@ -18492,6 +18732,11 @@ var AgentSession = class {
           recordResolution(txHash, "failed");
           return;
         }
+        if (result.status === "expired") {
+          ui.onTxStatus(txHash, chainName ?? "", "failed", explorerUrl);
+          recordResolution(txHash, "failed");
+          return;
+        }
       } catch (err) {
         if (this.config.verbose) {
           process.stderr.write(`[session] tx confirm poll ${attempt + 1} failed: ${err?.message ?? err}
@@ -19628,7 +19873,7 @@ var cachedVersion = null;
 function getVersion() {
   if (cachedVersion) return cachedVersion;
   if (true) {
-    cachedVersion = "6.3.0";
+    cachedVersion = "7.2.0";
     return cachedVersion;
   }
   try {
@@ -20125,7 +20370,7 @@ var EventBuffer = class {
 };
 
 // src/interactive/session.ts
-import { Chain as Chain13, fiatCurrencies as fiatCurrencies3 } from "@vultisig/sdk";
+import { Chain as Chain14, fiatCurrencies as fiatCurrencies3 } from "@vultisig/sdk";
 import chalk14 from "chalk";
 import ora3 from "ora";
 import * as readline3 from "readline";
@@ -20976,7 +21221,7 @@ Error: ${error2.message}`));
       } else if (rest[i] === "--destination-tag") {
         const tag = rest[i + 1];
         const parsedTag = Number(tag);
-        if (chain !== Chain13.Ripple || !/^(0|[1-9]\d*)$/.test(tag ?? "") || !Number.isSafeInteger(parsedTag) || parsedTag > 4294967295) {
+        if (chain !== Chain14.Ripple || !/^(0|[1-9]\d*)$/.test(tag ?? "") || !Number.isSafeInteger(parsedTag) || parsedTag > 4294967295) {
           throw new Error("Invalid XRP DestinationTag: expected an integer from 0 to 4294967295");
         }
         destinationTag = parsedTag;
@@ -21824,7 +22069,7 @@ See also: balance, tx-status`
       if (!amount && !options.max) throw new Error("Provide an amount or use --max");
       if (amount && options.max) throw new Error("Cannot specify both amount and --max");
       const chain = resolveChainOrThrow(chainStr);
-      if (options.destinationTag !== void 0 && chain !== Chain14.Ripple) {
+      if (options.destinationTag !== void 0 && chain !== Chain15.Ripple) {
         throw new Error("--destination-tag is only supported for XRP");
       }
       const destinationTag = options.destinationTag === void 0 ? void 0 : Number(options.destinationTag);
@@ -21952,7 +22197,7 @@ program2.command("broadcast").description("Broadcast a pre-signed raw transactio
 program2.command("tx-status").description("Check transaction status (polls until terminal or timeout)").requiredOption("--chain <chain>", "Target blockchain").requiredOption("--tx-hash <hash>", "Transaction hash to check").option("--no-wait", "Return immediately without waiting for confirmation").option("--timeout <seconds>", "Max seconds to poll before giving up (default 120)").addHelpText(
   "after",
   `
-Statuses: pending, not_found, confirmed, failed
+Statuses: pending, not_found, expired, confirmed, failed
 Malformed hashes fail with INVALID_HASH (exit 4).
 
 Examples:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/cli",
-  "version": "6.3.0",
+  "version": "7.2.0",
   "description": "The self-custody MPC wallet CLI for AI coding agents (Claude Code, Cursor, OpenCode). Natural-language agent mode, 36+ chains, DKLS23 threshold signatures. Seedless.",
   "type": "module",
   "bin": {
@@ -73,10 +73,10 @@
     "@msgpack/msgpack": "^3.1.2",
     "@napi-rs/keyring": "^1.3.0",
     "@noble/hashes": "^2.2.0",
-    "@vultisig/client-shared": "^0.3.5",
-    "@vultisig/core-chain": "^4.1.1",
-    "@vultisig/rujira": "^70.0.0",
-    "@vultisig/sdk": "^6.3.0",
+    "@vultisig/client-shared": "^0.3.6",
+    "@vultisig/core-chain": "^5.2.0",
+    "@vultisig/rujira": "^71.0.0",
+    "@vultisig/sdk": "^7.2.0",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^15.0.0",
@@ -94,7 +94,7 @@
     "@types/node": "^26.1.1",
     "@types/tabtab": "^3.0.4",
     "@types/ws": "^8.18.1",
-    "@vultisig/core-mpc": "^2.1.1",
+    "@vultisig/core-mpc": "^3.1.0",
     "esbuild": "^0.28.1",
     "ethers": "^6.17.0",
     "node-pty": "^1.1.0",