Releases
25.7.3
- Add
algorithm
input for creating Addresses to use a non-default key algorithm. - Support account as a to/from choice for multi-transfer.
- Add support for
KAVA
chain. - Add support for
KASPA
chain.
us-docker.pkg.dev/cordialsys/containers/treasury:25.7.3
25.7.2
- Add support for automatic retries of transfers via Chain retry policy.
- See more at automatic retries.
- We've changed the default connector policy, please update yours.
- More strict on advancing
submitting
->finalizing
transfer/transaction state.
us-docker.pkg.dev/cordialsys/containers/treasury:25.7.2
25.7.1
- Fix issue where connector did not relay information for addresses with memo set.
- Greatly improve conflict resolution between transactions sharing signing addresses.
- Improve
treasury transaction queues
command. - Improve the accuracy of
transaction.after
field to better reflect transaction dependencies. - Connector now re-submits transactions not yet assigned a block (stuck in mempool condition).
- Fix issue where solana max fee was calculated incorrectly.
retry
will also recheck any signed transaction attempts.- Fix very rare consensus fault in API nodes that occurs when there are many records being queried.
- Improve performance polling ongoing transactions.
- Add support for new
APTOS
"fungible asset" token standard.
us-docker.pkg.dev/cordialsys/containers/treasury:25.7.1
25.6.4
- Use account or address as valid input for fee-payer
treasury install
subcommands- Add Cardano chain (
ADA
) - Add Babylon chain (
BABY
) - Support
memo
input on Transfer resource for chains that use it. - Minor connector performance improvements
us-docker.pkg.dev/cordialsys/containers/treasury:25.6.4
25.6.3
- Retrying transfers no longer fails transactions that are signed already.
- Transactions will become failed instead when one of them succeeds.
- In the unlikely chance that an ealier attempt lands on-chain before the retry, it will be reported accurately.
- Add
recheck
custom action, which will switch a transaction intofinalizing
state, forcing it to be re-observed. - Transfers will check history more effectively for better queuing behavior.
us-docker.pkg.dev/cordialsys/containers/treasury:25.6.3
25.6.2
- Fix issue with fee-payer transfers not being able to be retried.
- It's now possible to send the full amount on XRP when using inclusive-fee spending.
- Treasury will internally use XRP's
AccountDelete
instruction when appropriate.
- Treasury will internally use XRP's
us-docker.pkg.dev/cordialsys/containers/treasury:25.6.2
25.6.1
- Add support for batch-transfers, where multiple from & to addresses may be specified.
- Only supported on Bitcoin chains currently.
- Deprecated
fee_payer
andfee_inclusive
fields -- usefee.payer
andfee.inclusive
instead.- Backwards compatibility will be maintained.
us-docker.pkg.dev/cordialsys/containers/treasury:25.6.1
25.5.1
- Add
fee_payer
field for Transfer resource, allowing users to use a separate address to pay for fees.- Initially supported for: Solana, Cosmos chains, Sui, Aptos
- Bugfix
treasury
CLI deserializing approvals - Synchronize account + description data of addresses to Oracle API for more detailed reporting.
us-docker.pkg.dev/cordialsys/containers/treasury:25.5.1
25.4.6
- Fix pagination issues for nested endpoints listing Addresses or Assets
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.6
25.4.5
- Add support for Nillion chain (NIL)
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.5
25.4.4
- Restore
--sso
option fortreasury users update
- Restore missing "height" in
cord supervise run
logs
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.4
25.4.3
- Add support for DUSK network
- Aborting transactions (directly or indirectly) will also cancel their ongoing signatures.
- Add support for open-pubkey credentials, under the
open-pubkey
feature flag. - Add immutable
subject
field toUser
resource (SSO subject identifier), which is mapped from the old sso-user label.
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.3
25.4.2
- Add support for Band chain
- Add support for Zeta chain (native cosmos transactions)
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.2
25.4.1
- Add support for simulating requests to see how rules evaluate.
- Example:
curl -H 'dry-run: user=conor' -X POST -d "{\"variant\":\"internal\"}" localhost:8777/v1/accounts/new_account
- Example:
treasury --dry-run "user=root" users create human joe
- Example:
- Include traces of policy evaluation in the error response when a request is rejected by policy.
- Add support for Solana inclusive fee spending.
us-docker.pkg.dev/cordialsys/containers/treasury:25.4.1
25.3.4
- Fix issue where fee-limit values were not initializing on chain resource
- Guard against transactions using conflicting information from stale RPC nodes
- Fix edge case where deny rule variant did not use
"any/user
as default forinitiate
field
us-docker.pkg.dev/cordialsys/containers/treasury:25.3.4
25.3.3
- Support inclusive fee spending for transfers for select chains. This is helpful for sending the full balance of an address and minimizing dust.
- bitcoin chains, evm chains, cosmos chains, APTOS, SUI
- Add Akash chain (
AKT
) - Add Astar chain (
ASTR
) - Enforce user verification for webauthn credentials more strictly
us-docker.pkg.dev/cordialsys/containers/treasury:25.3.3
25.3.1
- Add Filecoin support
- Add FeeLimit configuration to
Chain
resource. This is a sanity limit to protect from fee griefing. - Update TAO staking ABI to be compatible with latest Bittensor changes
us-docker.pkg.dev/cordialsys/containers/treasury:25.3.1
25.2.7
- Speed up signer operations (key-generation, signature generation) by >50%
- Previously multi-node clusters would take ~3s to complete a signer resource, now it's an average of 1s.
- Fix rare transient bug where a periodic backup fails
- Fix edge case where
TREASURY_API_KEY
was not propogated correctly to connector API
us-docker.pkg.dev/cordialsys/containers/treasury:25.2.7
25.2.6
- Fix false-positive warning
us-docker.pkg.dev/cordialsys/containers/treasury:25.2.6
25.2.5
- Some quality of life improvements with
treasury
CLI - Fix pagination edge case reading
Chain
andAccessRule
resources - Add Monad (
MON
) chain
us-docker.pkg.dev/cordialsys/containers/treasury:25.2.5
25.2.4
- Reduce idle memory consumption by >70% when there is a lot of data stored
- Add
SeiEVM
chain, which is the EVM compatibility layer toSEI
us-docker.pkg.dev/cordialsys/containers/treasury:25.2.4
25.2.3
All participants must update their cord
binary to be at least 25.2.3
or later. Otherwise the update process will not be reliable.
Latest cord
binary may safely be used to supervise older versions of treasury.
-
Support empty initiator filter in require/deny rules
-
Fix issue where an empty initiator led to dropped quorom filter in transfer-rules
-
Add support for Bitcoin taproot addresses
-
Fix regression not pruning old operations
-
Add retention settings to
Treasury
resource- E.g. Set retention of operations to 8 hours:
treasury treasuries retention --set-retention-completed-operations 8h
- E.g. Set retention of operations to 8 hours:
-
Update no longer makes large jump in height, so resyncing stale nodes after updating cluster is supported
- Once both Treasury nodes and
cord
are updated, this improvement will be active.
- Once both Treasury nodes and
-
All loggers should respect
TREASURY_LOG_FORMAT=json
if set. -
Add XLM chain support
-
Bug fix memory leak in
cord backup service
. -
Bug fix failure in
cord backup restore
. -
Fix regression leading to inaccurate version reported in API endpoint.
-
Update cometbft + cosmos-sdk, update engine database backend
-
Add
infinite_invites
feature for demo scenarios to prevent invite credential expiration -
Add
custom/load
operation create Keys from manually imported signer.db keys -
Support creating an Address for a given Key
-
Add support for manually resharing key-shares using
signer
CLI -
Addresses can be atomically added to Accounts by setting
.account
field -
Feature
disable_account_addresses_field
to disable Account.addresses field -
Creating Addresses now triggers an additional policy check against creating a Key resource
- You may need to update your policy to permit users to create
internal
variant keys.
create allow access-rule internal-key { action = "create", resource = { type = "Key", variant = "internal" }, initiate = "any/user" }
- You may need to update your policy to permit users to create
-
Fix flakiness issue in
cord supervise
leading to failed updates -
Add
.state
to Signer resource to reflect if a signer node is recently active/online or not.
us-docker.pkg.dev/cordialsys/containers/treasury:25.2.3
24.6.3
- Fix host network mode support for
cord supervise
- Support
more_than
,less_than
fields in notional limits
us-docker.pkg.dev/cordialsys/containers/treasury:24.6.3
24.6.2
- Change custom/cancel to custom/abort for Transaction and Transfer
- Add dynamic blueprints
- Implement piping to stdin of
treasury script
us-docker.pkg.dev/cordialsys/containers/treasury:24.6.2
24.6.1
- Simplified update mechanism of
cord supervise
which removes many failure states.- To take advantage of this, both
cord
and the container image must both be at least24.6.1
- To take advantage of this, both
- Add
cord supervise revert
command, which will revert failed updates, allowing them to be retried.
A changes made to cord supervise
requires all participants to update. You must be sure that all nodes are updated.
us-docker.pkg.dev/cordialsys/containers/treasury:24.6.1
24.5.4
- Introduce
allowed/user
constant, which makes rules with approvers agnostic of who initiated. - Add Enjin chain support.
us-docker.pkg.dev/cordialsys/containers/treasury:24.5.4
24.5.3
- Add support for TAO staking
us-docker.pkg.dev/cordialsys/containers/treasury:24.5.3
24.5.2
- Fix regression preventing webauthn credentials from registering
us-docker.pkg.dev/cordialsys/containers/treasury:24.5.2
24.5.1
- Remove all legacy APIs
- Add
--no-default-blueprint
and--extra-blueprint
intreasury demo start
us-docker.pkg.dev/cordialsys/containers/treasury:24.5.1
24.4.10
- Permit arrays in access-rule data filter
- Treasury API can respond to
?output={ccl,csv,pdf}
with full reports - Treasury API re-exports Oracle API movement endpoint
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.10
24.4.9
- Add support for AWS secret manager
- Fix spammy log in backup service
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.9
24.4.8
- API keys can now create Treasury entries in the Admin API
- Add rich support for encryption at rest.
- Add persistent rotating event logs.
- Fix race condition in first backup of periodic backup
- Treasury will associate the treasury ID with automatic address subscriptions.
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.8
24.4.7
- add /healthy endpoint
- fix minor issue when using multiple backup keys
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.7
24.4.6
- prevent approvers from getting 'informally' recorded when their approval is not allowed
- stop deleting invite credentials immediately when there is a policy rejection
- add support for exporting backups for multiple backup keys (bak)
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.6
24.4.5
- updated connector to associate addresses on oracle API with treasury ID
- fixed bug in
signer backup recover-key
overwriting the last encrypted share file.
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.5
24.4.4
Snapshot files (now "snapshot.tar" instead of "snapshot.zip") have had their format changed to be more usable and understandable. While snapping will work the same way, this release is not compatible with older snapshots.
- refactored snapshot layout from
cord backup snapshot
- added
cord genesis init-api
to more easily create API nodes - added args
--api-node
--connector
forcord supervise run
to make it easier to run API nodes - add slack alert options for
cord supervise run
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.4
24.4.3
- fix bug with
authorizing
operations affected by transfer rules not getting persisted
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.3
24.4.2
- Fix encoding issues with raw signing API
- Migrate connector credential to keying
- Include $TREASURY_HOME/keyring in snapshot & restore
- Add
approve
and:=
operator to CSL
Connector should migrate on it's own, but in case it fails, you can manually run it with:
cord migrate connector-credential --home $TREASURY_HOME
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.2
24.4.1
Warning: Treasury must be in 24.2.x
or later before you can safely upgrade to 24.4.y
.
- Simplify behavior of notional limits in transfer rules
- Make transfer rules fully independent of any access-rules
- CSL scripting improvements
us-docker.pkg.dev/cordialsys/containers/treasury:24.4.1
24.3.2
- Add initial support for XRP
- Bugfixes for cord; fix race condition gossiping triples
us-docker.pkg.dev/cordialsys/containers/treasury:24.3.2
24.3.1
Warning: Treasury must be in 24.2.x
before you can safely upgrade to 24.3.y
.
- release
cord backup
suite of commands - remove legacy cosmwasm endpoints.
- disable maintenance routines after an update is active
- bug fix price in worker
- use 'cancelled' instead of 'canceled'
us-docker.pkg.dev/cordialsys/containers/treasury:24.3.1
24.2.10
- disable maintenance routines after an update is active
- bug fix price in worker
- use 'cancelled' instead of 'canceled'
24.2.9
- minor improvements to
cord genesis
setup - add
signer backup
commands to help test backups
24.2.8
- Fix connector event for subscribing to addresses quickly
24.2.7
- Fix missing filter for /access-rules query endpoint
24.2.6
- Fix bug where account was dropped on destination
- add unprice custom action to remove prices
24.2.5
- return operations, transfers, and transactions in descending order
- complete notional limits for transfer rules
- bugfix asset update/import missing price error
24.2.4
- fix bug where operation gets stuck in creating state when generating addresses
- make oracle_url configurable for connector
24.2.3
- drop invalid references on Account resource
24.2.2
- fix bug connector subscribing to oracle api with initial 0 subscription
- bugfix case leading to invalid transfer rule
- on update, drop resources with invalid blank ID
24.2.1
- release initial support for native staking (solana, ethereum, and cosmos chains)
- update policy engine to filter based on resource name(s) and state(s)
- add connector API server to connector CLI
24.2.0
us-docker.pkg.dev/cordialsys/containers/treasury:24.2.0
Changes
- Change
Transaction
resource name to not use parent
24.1.27
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.27
Changes
- Add new chains:
- Bittensor (TAO)
- Polkadot (DOT)
- Kusama (KSM)
- Telegram Open Network (TON)
- Berachain testnet (BERA)
- Add feature to disable all legacy endpoints.
- Websocket 'audit' events are now more consistent and reflect all changes.
- Support filtering resources in access-rules based on data attributes.
24.1.26
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.26
Changes
- automatically migrate key names in signer.sb
- add some optimization to connector
- no longer create transfer-rule as side effect of creating internal account
- add blockbook client driver for bitcoin chains
- remodel crosschain tx-info model
- bugfix invalid fields on migrated resources
- add
cord genesis install-triples
cmd - add
treasury admin
commands to manage organization permissions
24.1.23
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.23
Changes
- automatically subscribe addresses in treasury to oracle API
- fix rejection approval of registering credential
- subscribe connector to event stream to make fast transaction + address updates
- fix migration of legacy transfers to add placeholder for parent
- add .network field to Treasury
- fix regression in creating new users via legacy api
- fix condition resulting in long startup time for engine
24.1.20
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.20
Changes
- support solana token2022 SPL tokens
- patch error migrating legacy feature structure
24.1.18
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.18
Changes
- add missing CRUD in API server and treasury CLI
- /activate and /disable for Feature and TransferRule
- shared addresses (and corresponding shared keys)
- add legacy migrate to help create new treasury.toml
24.1.16
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.16
Changes
- add treasury CLI for importing external client-keys
- fix bug querying transfers created by legacy endpoint
- make metadata updates more consistent in legacy endpoints
- fix issue where user variants in roles were not exported
- update policy engine to reject useless approvers
- bugfix addresses never generating on legacy endpoint
24.1.13
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.13
Changes
- minor bugfixes for new connector process
- add gas fee priority customization to Transfer and Chain resources
- add transfer pause and unpause custom endpoints
24.1.12
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.12
Changes
- new connector process, feature gated under
new_connector
- new chain abstraction to enable detection of conflictions between transaction inputs
- fast dequeuing of queued transaction (or no use of queuing for some chains like Solana or Tron)
- Safe retry mechanism (POST /transfers/:transfer/retry) that protects from double-sending
- Bug fix normalization of Sui/Aptos contract values, Sui gas estimation optimization
- Fix issue where operations could not be canceled if the resource already exists
- support adding chain RPC overrides to treasury.toml file
24.1.11
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.11
Changes
- add feature to auto-generate policy doc after api changes (maintain a legacy behavior)
- fix small issues with generating legacy policy doc
- permit creating 'custom' variant chains
- setup various metrics for engine and signer
24.1.10
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.10
Changes
- remove git-lfs dependency
24.1.9
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.9
Changes
- frontend cleanup variable handling and state/clerk management
- fix uniqueness issue with transction ID's
- fix token transaction issue
- fix delayed polling cycle on withdrawals
24.1.8
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.8
Changes
- remove invite restriction where you couldn't register an invite to yourself
- change transfer to return last-transaction as a name
24.1.7
us-docker.pkg.dev/cordialsys/containers/treasury:24.1.7