@agentgrant.cash/cli 1.0.0 → 1.0.1

package/.env.example

@@ -1,9 +1,14 @@
 # Grant Cash CLI — backend routing.
 #
-# Copy to `.env` (loaded from the PACKAGE ROOT only — never the cwd). Every value
-# is optional; the defaults point at production. Set these to repoint at dev /
-# staging without touching code. You do NOT need to know the final URLs to build
-# the CLI — wire them here whenever they're ready.
+# Copy to `.env` in the folder you run the CLI from (the current working
+# directory). The CLI loads it automatically — this is how you point an
+# installed / `npx` CLI at localhost or staging. Already-exported shell env vars
+# take precedence over the file. Every value is optional; the defaults point at
+# production. The active backend is shown by `grant status`.
+#
+# Example (local dev):
+#   GRANTCASH_API_URL=http://localhost:3001/api
+#   GRANTCASH_AGENT_URL=http://localhost:8080
 
 # ── Money side (Perfolio backend — gold, portfolio, cash) ──
 GRANTCASH_API_URL=https://api.perfolio.ai/api

package/dist/cli/index.js

@@ -1,43 +1,25 @@
 #!/usr/bin/env node
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
+import { join } from "node:path";
 import { Command } from "commander";
-import { isJsonMode, printError } from "../lib/index.js";
+import { isJsonMode, printError, loadDotEnvFile } from "../lib/index.js";
 /**
- * Load `.env` from the PACKAGE ROOT only (never the cwd), so an installed CLI
- * can't pick up a stray `.env` in whatever folder it's run from and silently
- * repoint at the wrong backend. Already-exported shell vars win.
+ * Load backend config from `.env`. Precedence (first writer wins — the loader only
+ * sets keys that are still unset):
+ *   1. Already-exported shell env vars — always win.
+ *   2. `.env` in the current working directory — where you run the CLI. This is
+ *      what lets you point an installed / `npx` CLI at localhost or staging:
+ *      put GRANTCASH_API_URL=http://localhost:… in the `.env` of the folder you
+ *      run `grant` from.
+ *   3. `.env` at the package root — only present when running from a source
+ *      checkout; a published package ships no `.env`, so this is a dev fallback.
+ *
+ * Any non-default backend is shown by `grant config show` / `grant status`
+ * (`→ money` / `→ agent`), so a repoint is always visible rather than silent.
  */
-function loadDotEnv(path) {
-    let raw;
-    try {
-        raw = readFileSync(path, "utf8");
-    }
-    catch {
-        return;
-    }
-    for (const line of raw.split("\n")) {
-        const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);
-        if (!m)
-            continue;
-        const key = m[1];
-        if (process.env[key] !== undefined)
-            continue;
-        let val = m[2].trim();
-        if ((val.startsWith('"') && val.endsWith('"')) ||
-            (val.startsWith("'") && val.endsWith("'"))) {
-            // Quoted value: keep everything inside the quotes verbatim (a `#` here is data).
-            val = val.slice(1, -1);
-        }
-        else {
-            // Unquoted value: strip a trailing inline comment (whitespace + `#…`), the
-            // dotenv convention. Prevents `KEY=http://x  # note` from capturing the note.
-            val = val.replace(/\s+#.*$/, "").trim();
-        }
-        process.env[key] = val;
-    }
-}
-loadDotEnv(fileURLToPath(new URL("../../.env", import.meta.url)));
+loadDotEnvFile(join(process.cwd(), ".env")); // cwd — highest-precedence file
+loadDotEnvFile(fileURLToPath(new URL("../../.env", import.meta.url))); // package root — dev fallback
 import { registerAuth } from "./commands/auth.js";
 import { registerPortfolio } from "./commands/portfolio.js";
 import { registerMoney } from "./commands/money.js";

package/dist/lib/config.js

@@ -5,9 +5,9 @@ import { mkdirSync, readFileSync, writeFileSync, unlinkSync } from "node:fs";
  * Backend base URLs — env-overridable, production defaults.
  *
  * Money side = Perfolio backend; Agent side = Agent-mode backend. Set the env
- * vars (e.g. in the package-root `.env`) to repoint at dev/staging without
- * touching code. You don't need final URLs to build — the agent default is a
- * placeholder; override GRANTCASH_AGENT_URL when it's known.
+ * vars (in a `.env` in the directory you run the CLI from, or as exported shell
+ * vars) to repoint at dev/staging/localhost without touching code. The active
+ * backend is shown in `grant status`.
  */
 export function baseUrls(env = process.env) {
     return {

package/dist/lib/dotenv.js

@@ -0,0 +1,45 @@
+import { readFileSync } from "node:fs";
+/**
+ * Minimal, dependency-free `.env` loader.
+ *
+ * Reads `path` and applies each `KEY=value` line into `env`, but ONLY for keys
+ * that are still unset — so an already-exported shell var (or an earlier-loaded
+ * file) always wins. Missing/unreadable files are a no-op. Supports quoted values
+ * (verbatim, including `#`) and strips trailing inline comments on unquoted values
+ * (the dotenv convention). Returns the keys it actually set (for logging/tests).
+ */
+export function applyDotEnv(raw, env = process.env) {
+    const applied = [];
+    for (const line of raw.split("\n")) {
+        const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/);
+        if (!m)
+            continue;
+        const key = m[1];
+        if (env[key] !== undefined)
+            continue;
+        let val = m[2].trim();
+        if ((val.startsWith('"') && val.endsWith('"')) ||
+            (val.startsWith("'") && val.endsWith("'"))) {
+            // Quoted value: keep everything inside the quotes verbatim (a `#` here is data).
+            val = val.slice(1, -1);
+        }
+        else {
+            // Unquoted value: strip a trailing inline comment (whitespace + `#…`).
+            val = val.replace(/\s+#.*$/, "").trim();
+        }
+        env[key] = val;
+        applied.push(key);
+    }
+    return applied;
+}
+/** Load a `.env` file by path into `env` (no-op if the file is missing). */
+export function loadDotEnvFile(path, env = process.env) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        return [];
+    }
+    return applyDotEnv(raw, env);
+}

package/dist/lib/index.js

@@ -1,5 +1,6 @@
 export * from "./types.js";
 export * from "./config.js";
+export * from "./dotenv.js";
 export * from "./errors.js";
 export * from "./output.js";
 export * from "./device.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentgrant.cash/cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Grant Cash — one CLI for your money (gold) and your agent (pay-per-use services). Routes to the Perfolio backend and the Agent-mode backend behind a single, plain-language surface.",
   "type": "module",
   "bin": {

package/skills/grant-cash/SKILL.md

@@ -14,6 +14,23 @@ These are **two sides of the same Grant Cash account**, not two separate apps or
 
 > Note for assistants: do **not** describe this as a "portfolio service" plus an "agent service", and never mention internal system names. It is one product — Grant Cash — with an Investments side and a Spending side. Speak plainly: gold, cash, bitcoin, ethereum, "your worth", "spending money".
 
+## Install / run
+
+This CLI is published on npm as **`@agentgrant.cash/cli`**. Run it without installing:
+
+```
+npx @agentgrant.cash/cli <command>      # e.g. npx @agentgrant.cash/cli status
+```
+
+Or install it once to get the short `grant` command:
+
+```
+npm install -g @agentgrant.cash/cli
+grant status
+```
+
+Throughout this skill, **`grant <command>` is shorthand for `npx @agentgrant.cash/cli <command>`** (or the global `grant` if you installed it). Requires Node ≥ 20.
+
 ## Output (for assistants driving this CLI)
 
 - Output is **JSON** when stdout is not a TTY (you captured it) or with `--json`; pretty for people otherwise.