v0.2.1

Review pass before wider sharing:

• revoke and audit now resolve the wallet mm has selected (selectedWallet in the local snapshot) instead of the first known wallet — matters as soon as an account has several wallets.
• Token symbol() is sanitised (control characters and terminal escape sequences stripped, 24 chars max) and decimals() clamped, so a hostile token cannot inject text into the terminal or an agent's context.
• Spender labels are chain-aware: deterministic deployments on every chain, others only where that address is known (adds Base routers).
• unlimited now means exactly ≥ 2^255 (was 2^255 − 1).
• scanned.skippedNonErc20 counts pairs whose contract does not answer allowance().
• 21 unit tests (vitest) covering parsing, sanitisation, thresholds, labels and wallet resolution; CI runs them before the build.

v0.2.0

• audit: --chain-ids 1,8453,42161 scans several chains in one call. Result now carries chainIds, a chains[] array with per-chain scanned / totals (or error when a chain fails while the others still return), global totals with chainsScanned / chainsFailed, and every allowance entry carries its chainId.
• --chain-id still works as a shorthand; --from-block is single-chain only.
• Breaking: top-level scanned moved under chains[].

v0.1.1

• audit: --lookback-days (default 30) converted with the chain's block time; --chunk default 10 000; hint now distinguishes 'no events' from 'found but none active'
• revoke: --gas-speed, --max-fee-gwei, --priority-fee-gwei (fixes rpc_fee_too_low on Sepolia)
• verified end to end on Sepolia with a MetaMask server wallet (Guard Mode, email 2FA)