@bankr/cli 0.1.0 → 0.2.0

package/dist/commands/llm.js

@@ -11,100 +11,255 @@ const ERR_LLM_NOT_ENABLED = "LLM Gateway not enabled on this API key. Enable at
  * Fallback model catalog — used when the gateway is unreachable or unauthenticated.
  * resolveModels() fetches live data from GET /v1/models; this list is the offline safety net.
  */
+const IMAGE_INPUT = ["text", "image"];
+const TEXT_INPUT = ["text"];
 const GATEWAY_MODELS = [
-    // Claude — 90% cache read discount, 25% cache write premium
+    // Claude
     {
         id: "claude-opus-4.6",
         name: "Claude Opus 4.6",
         owned_by: "anthropic",
-        cost: { input: 15.0, output: 75.0, cacheRead: 1.5, cacheWrite: 18.75 },
+        contextWindow: 1000000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 5.0, output: 25.0, cacheRead: 0.5, cacheWrite: 6.25 },
     },
     {
         id: "claude-opus-4.5",
         name: "Claude Opus 4.5",
         owned_by: "anthropic",
-        cost: { input: 15.0, output: 75.0, cacheRead: 1.5, cacheWrite: 18.75 },
+        contextWindow: 200000,
+        maxTokens: 64000,
+        input: IMAGE_INPUT,
+        cost: { input: 5.0, output: 25.0, cacheRead: 0.5, cacheWrite: 6.25 },
     },
     {
         id: "claude-sonnet-4.6",
         name: "Claude Sonnet 4.6",
         owned_by: "anthropic",
+        contextWindow: 1000000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
         cost: { input: 3.0, output: 15.0, cacheRead: 0.3, cacheWrite: 3.75 },
     },
     {
         id: "claude-sonnet-4.5",
         name: "Claude Sonnet 4.5",
         owned_by: "anthropic",
+        contextWindow: 1000000,
+        maxTokens: 64000,
+        input: IMAGE_INPUT,
         cost: { input: 3.0, output: 15.0, cacheRead: 0.3, cacheWrite: 3.75 },
     },
     {
         id: "claude-haiku-4.5",
         name: "Claude Haiku 4.5",
         owned_by: "anthropic",
-        cost: { input: 0.8, output: 4.0, cacheRead: 0.08, cacheWrite: 1.0 },
+        contextWindow: 200000,
+        maxTokens: 64000,
+        input: IMAGE_INPUT,
+        cost: { input: 1.0, output: 5.0, cacheRead: 0.1, cacheWrite: 1.25 },
+    },
+    // Gemini
+    {
+        id: "gemini-3.1-pro",
+        name: "Gemini 3.1 Pro",
+        owned_by: "google",
+        contextWindow: 1048576,
+        maxTokens: 65536,
+        input: IMAGE_INPUT,
+        cost: { input: 2.0, output: 12.0, cacheRead: 0.2, cacheWrite: 0.375 },
+    },
+    {
+        id: "gemini-3.1-flash-lite",
+        name: "Gemini 3.1 Flash Lite",
+        owned_by: "google",
+        contextWindow: 1048576,
+        maxTokens: 65536,
+        input: IMAGE_INPUT,
+        cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0.08333 },
     },
-    // Gemini — 75% cache read discount
     {
         id: "gemini-3-pro",
         name: "Gemini 3 Pro",
         owned_by: "google",
-        cost: { input: 1.25, output: 10.0, cacheRead: 0.3125, cacheWrite: 1.25 },
+        contextWindow: 1048576,
+        maxTokens: 65536,
+        input: IMAGE_INPUT,
+        cost: { input: 2.0, output: 12.0, cacheRead: 0.2, cacheWrite: 0.375 },
     },
     {
         id: "gemini-3-flash",
         name: "Gemini 3 Flash",
         owned_by: "google",
-        cost: { input: 0.15, output: 0.6, cacheRead: 0.0375, cacheWrite: 0.15 },
+        contextWindow: 1048576,
+        maxTokens: 65535,
+        input: IMAGE_INPUT,
+        cost: { input: 0.5, output: 3.0, cacheRead: 0.05, cacheWrite: 0.0833 },
     },
     {
         id: "gemini-2.5-pro",
         name: "Gemini 2.5 Pro",
         owned_by: "google",
-        cost: { input: 1.25, output: 10.0, cacheRead: 0.3125, cacheWrite: 1.25 },
+        contextWindow: 1048576,
+        maxTokens: 65536,
+        input: IMAGE_INPUT,
+        cost: { input: 1.25, output: 10.0, cacheRead: 0.125, cacheWrite: 0.375 },
     },
     {
         id: "gemini-2.5-flash",
         name: "Gemini 2.5 Flash",
         owned_by: "google",
-        cost: { input: 0.15, output: 0.6, cacheRead: 0.0375, cacheWrite: 0.15 },
+        contextWindow: 1048576,
+        maxTokens: 65535,
+        input: IMAGE_INPUT,
+        cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0.0833 },
+    },
+    // OpenAI
+    {
+        id: "gpt-5.4",
+        name: "GPT 5.4",
+        owned_by: "openai",
+        contextWindow: 1050000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 2.5, output: 15.0, cacheRead: 0.25, cacheWrite: 0 },
+    },
+    {
+        id: "gpt-5.4-mini",
+        name: "GPT 5.4 Mini",
+        owned_by: "openai",
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 0.75, output: 4.5, cacheRead: 0.075, cacheWrite: 0 },
+    },
+    {
+        id: "gpt-5.4-nano",
+        name: "GPT 5.4 Nano",
+        owned_by: "openai",
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 0.2, output: 1.25, cacheRead: 0.02, cacheWrite: 0 },
     },
-    // OpenAI — 50% cache read discount
     {
         id: "gpt-5.2",
         name: "GPT 5.2",
         owned_by: "openai",
-        cost: { input: 2.5, output: 10.0, cacheRead: 1.25, cacheWrite: 2.5 },
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: TEXT_INPUT,
+        cost: { input: 1.75, output: 14.0, cacheRead: 0.175, cacheWrite: 0 },
     },
     {
         id: "gpt-5.2-codex",
         name: "GPT 5.2 Codex",
         owned_by: "openai",
-        cost: { input: 2.5, output: 10.0, cacheRead: 1.25, cacheWrite: 2.5 },
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: TEXT_INPUT,
+        cost: { input: 1.75, output: 14.0, cacheRead: 0.175, cacheWrite: 0 },
     },
     {
         id: "gpt-5-mini",
         name: "GPT 5 Mini",
         owned_by: "openai",
-        cost: { input: 0.4, output: 1.6, cacheRead: 0.2, cacheWrite: 0.4 },
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: TEXT_INPUT,
+        cost: { input: 0.25, output: 2.0, cacheRead: 0.025, cacheWrite: 0 },
     },
     {
         id: "gpt-5-nano",
         name: "GPT 5 Nano",
         owned_by: "openai",
-        cost: { input: 0.1, output: 0.4, cacheRead: 0.05, cacheWrite: 0.1 },
+        contextWindow: 400000,
+        maxTokens: 128000,
+        input: TEXT_INPUT,
+        cost: { input: 0.05, output: 0.4, cacheRead: 0.005, cacheWrite: 0 },
     },
     // Other providers
     {
-        id: "kimi-k2.5",
-        name: "Kimi K2.5",
-        owned_by: "moonshotai",
-        cost: { input: 0.6, output: 2.4, cacheRead: 0.09, cacheWrite: 0.6 },
+        id: "grok-4.1-fast",
+        name: "Grok 4.1 Fast",
+        owned_by: "x-ai",
+        contextWindow: 2000000,
+        maxTokens: 30000,
+        input: TEXT_INPUT,
+        cost: { input: 0.2, output: 0.5, cacheRead: 0.05, cacheWrite: 0 },
+    },
+    {
+        id: "deepseek-v3.2",
+        name: "DeepSeek V3.2",
+        owned_by: "deepseek",
+        contextWindow: 163840,
+        maxTokens: 65536,
+        input: TEXT_INPUT,
+        cost: { input: 0.26, output: 0.38, cacheRead: 0.13, cacheWrite: 0 },
     },
     {
         id: "qwen3-coder",
         name: "Qwen3 Coder",
         owned_by: "qwen",
-        cost: { input: 0.3, output: 1.2, cacheRead: 0.15, cacheWrite: 0.3 },
+        contextWindow: 262144,
+        maxTokens: 65536,
+        input: TEXT_INPUT,
+        cost: { input: 0.12, output: 0.75, cacheRead: 0.06, cacheWrite: 0 },
+    },
+    {
+        id: "qwen3.5-plus",
+        name: "Qwen3.5 Plus",
+        owned_by: "qwen",
+        contextWindow: 1000000,
+        maxTokens: 65536,
+        input: TEXT_INPUT,
+        cost: { input: 0.26, output: 1.56, cacheRead: 0, cacheWrite: 0 },
+    },
+    {
+        id: "qwen3.5-flash",
+        name: "Qwen3.5 Flash",
+        owned_by: "qwen",
+        contextWindow: 1000000,
+        maxTokens: 65536,
+        input: TEXT_INPUT,
+        cost: { input: 0.1, output: 0.4, cacheRead: 0, cacheWrite: 0 },
+    },
+    {
+        id: "kimi-k2.5",
+        name: "Kimi K2.5",
+        owned_by: "moonshotai",
+        contextWindow: 262144,
+        maxTokens: 65535,
+        input: TEXT_INPUT,
+        cost: { input: 0.45, output: 2.2, cacheRead: 0.225, cacheWrite: 0 },
+    },
+    {
+        id: "minimax-m2.5",
+        name: "MiniMax M2.5",
+        owned_by: "minimax",
+        contextWindow: 196608,
+        maxTokens: 196608,
+        input: TEXT_INPUT,
+        cost: { input: 0.27, output: 0.95, cacheRead: 0.03, cacheWrite: 0 },
+    },
+    {
+        id: "minimax-m2.7",
+        name: "MiniMax M2.7",
+        owned_by: "minimax",
+        contextWindow: 204800,
+        maxTokens: 131072,
+        input: TEXT_INPUT,
+        cost: { input: 0.3, output: 1.2, cacheRead: 0.06, cacheWrite: 0 },
+    },
+    {
+        id: "glm-5",
+        name: "GLM-5",
+        owned_by: "z-ai",
+        contextWindow: 202752,
+        maxTokens: 131072,
+        input: TEXT_INPUT,
+        cost: { input: 0.72, output: 2.3, cacheRead: 0, cacheWrite: 0 },
     },
 ];
 /** Fetch live model list from the gateway; falls back to hardcoded catalog. */
@@ -126,6 +281,9 @@ async function resolveModels() {
                 id: m.id,
                 name: m.name ?? fallback?.name ?? m.id,
                 owned_by: m.owned_by,
+                contextWindow: m.context_window ?? fallback?.contextWindow ?? 128000,
+                maxTokens: m.max_output_tokens ?? fallback?.maxTokens ?? 32768,
+                input: m.input_modalities ?? fallback?.input ?? TEXT_INPUT,
                 cost: m.pricing
                     ? {
                         input: m.pricing.input,
@@ -139,6 +297,7 @@ async function resolveModels() {
                         cacheRead: 0,
                         cacheWrite: 0,
                     }),
+                ...(m.deprecation && { deprecation: m.deprecation }),
             };
         });
         return { models, live: true };
@@ -184,10 +343,17 @@ export async function modelsCommand() {
     output.brandBold("Bankr LLM Gateway — Available Models");
     console.log();
     const COL = { id: 24, name: 24, provider: 12 };
-    console.log(`  ${output.fmt.brandBold("Model ID".padEnd(COL.id))} ${output.fmt.brandBold("Name".padEnd(COL.name))} ${output.fmt.brandBold("Provider")}`);
-    console.log(output.fmt.dim(`  ${"─".repeat(COL.id + COL.name + COL.provider + 2)}`));
+    const hasDeprecated = models.some((m) => m.deprecation);
+    console.log(`  ${output.fmt.brandBold("Model ID".padEnd(COL.id))} ${output.fmt.brandBold("Name".padEnd(COL.name))} ${output.fmt.brandBold("Provider".padEnd(COL.provider))}${hasDeprecated ? ` ${output.fmt.brandBold("Notes")}` : ""}`);
+    console.log(output.fmt.dim(`  ${"─".repeat(COL.id + COL.name + COL.provider + (hasDeprecated ? 24 : 2))}`));
     for (const m of models) {
-        console.log(`  ${output.fmt.brand(m.id.padEnd(COL.id))} ${m.name.padEnd(COL.name)} ${output.fmt.dim(m.owned_by)}`);
+        let notes = "";
+        if (m.deprecation) {
+            notes = m.deprecation.replaced_by
+                ? `deprecated → ${m.deprecation.replaced_by}`
+                : "deprecated";
+        }
+        console.log(`  ${output.fmt.brand(m.id.padEnd(COL.id))} ${m.name.padEnd(COL.name)} ${output.fmt.dim(m.owned_by.padEnd(COL.provider))} ${notes ? output.fmt.dim(notes) : ""}`);
     }
     console.log();
     output.dim(`  Gateway: ${getLlmUrl()}`);
@@ -557,6 +723,9 @@ export async function setupOpenclawCommand(opts) {
             id: m.id,
             name: m.name,
             ...(m.owned_by === "anthropic" ? { api: "anthropic-messages" } : {}),
+            input: m.input,
+            contextWindow: m.contextWindow,
+            maxTokens: m.maxTokens,
             cost: m.cost,
         })),
     };

package/dist/commands/login.d.ts

@@ -6,11 +6,16 @@ export declare function loginCommand(opts: {
     acceptTerms?: boolean;
     keyName?: string;
     readWrite?: boolean;
+    walletApi?: boolean;
+    agentApi?: boolean;
+    tokenLaunch?: boolean;
     llm?: boolean;
     llmKey?: string;
     url?: boolean;
     siwe?: boolean;
     privateKey?: string;
     partnerKey?: string;
+    allowedIps?: string;
+    allowedRecipients?: string;
 }): Promise<void>;
 //# sourceMappingURL=login.d.ts.map

package/dist/commands/login.js

@@ -1,5 +1,7 @@
 import { confirm, input, select } from "@inquirer/prompts";
+import { isIP } from "node:net";
 import open from "open";
+import { isAddress } from "viem";
 import { CLI_USER_AGENT, DEFAULT_API_URL, getApiUrl, getConfigPath, readConfig, writeConfig, } from "../lib/config.js";
 import * as output from "../lib/output.js";
 const DEFAULT_DASHBOARD_URL = "https://bankr.bot/api";
@@ -218,17 +220,21 @@ async function emailLoginFlow(apiUrl, opts) {
     if (wallet.solAddress) {
         output.dim(`  SOL:  ${wallet.solAddress}`);
     }
+    // Headless mode: when --code is provided, skip all interactive prompts
+    const headless = !!opts.code;
     // Step 3: Accept terms if needed
     if (!wallet.hasAcceptedTerms) {
         output.blank();
         output.dim("  Please review our Terms of Service: https://bankr.bot/terms");
         output.blank();
         const accepted = opts.acceptTerms ??
-            (await confirm({
-                message: "Do you accept the Terms of Service?",
-                default: false,
-                theme: output.bankrTheme,
-            }));
+            (headless
+                ? false
+                : await confirm({
+                    message: "Do you accept the Terms of Service?",
+                    default: false,
+                    theme: output.bankrTheme,
+                }));
         if (!accepted) {
             fatal("Terms must be accepted to continue.");
         }
@@ -246,37 +252,49 @@ async function emailLoginFlow(apiUrl, opts) {
     output.blank();
     const defaultKeyName = `CLI-${new Date().toISOString().slice(0, 10)}`;
     const keyName = opts.keyName ??
-        (await input({
-            message: "Key name:",
-            default: defaultKeyName,
-            theme: output.bankrTheme,
-            validate: (v) => v.trim().length >= 3 ? true : "Name must be at least 3 characters.",
-        }));
-    const enableWrite = opts.readWrite ??
-        (await confirm({
-            message: "Enable write operations?",
-            default: false,
-            theme: output.bankrTheme,
-        }));
-    if (enableWrite) {
-        output.dim("  Includes: transactions, transfers, automations, order management");
-    }
-    else {
-        output.dim("  Read-only: portfolio, balances, prices, research");
-    }
+        (headless
+            ? defaultKeyName
+            : await input({
+                message: "Key name:",
+                default: defaultKeyName,
+                theme: output.bankrTheme,
+                validate: (v) => v.trim().length >= 3 ? true : "Name must be at least 3 characters.",
+            }));
+    // Fine-grained API flags. walletApi and tokenLaunch default to enabled.
+    // --read-write only controls readOnly, not which APIs are enabled.
+    const enableWallet = opts.walletApi ?? true;
+    const enableAgent = opts.agentApi ??
+        (headless
+            ? false
+            : await confirm({
+                message: "Enable Agent API? (AI prompts)",
+                default: false,
+                theme: output.bankrTheme,
+            }));
+    const enableTokenLaunch = opts.tokenLaunch ?? true;
     const enableLlm = opts.llm ??
-        (await confirm({
-            message: "Enable LLM gateway?",
-            default: false,
-            theme: output.bankrTheme,
-        }));
+        (headless
+            ? false
+            : await confirm({
+                message: "Enable LLM gateway?",
+                default: false,
+                theme: output.bankrTheme,
+            }));
+    if (opts.readWrite && !enableWallet && !enableAgent) {
+        output.warn("--read-write has no effect when both Wallet API and Agent API are disabled");
+    }
     const keySpin = output.spinner("Generating API key...");
     let apiKeyResult;
     try {
         apiKeyResult = await callGenerateApiKey(apiUrl, identityToken, {
             name: keyName.trim(),
-            agentApiEnabled: { readOnly: !enableWrite },
+            walletApiEnabled: enableWallet,
+            agentApiEnabled: enableAgent,
+            readOnly: opts.readWrite ? false : undefined,
+            tokenLaunchApiEnabled: enableTokenLaunch,
             llmGatewayEnabled: enableLlm,
+            allowedIps: opts.allowedIps,
+            allowedRecipients: opts.allowedRecipients,
         });
         keySpin.stop();
     }
@@ -286,10 +304,25 @@ async function emailLoginFlow(apiUrl, opts) {
     }
     // Show result
     output.blank();
-    const mode = enableWrite ? "read-write" : "read-only";
+    const features = [
+        enableWallet && "Wallet",
+        enableAgent && "Agent",
+        enableTokenLaunch && "Token Launch",
+        enableLlm && "LLM",
+    ].filter(Boolean);
     output.success(`API key "${apiKeyResult.name}" saved`);
-    output.dim(`  Mode: ${mode}`);
+    output.dim(`  Features: ${features.length ? features.join(", ") : "none"}`);
     output.dim(`  LLM:  ${apiKeyResult.llmGatewayEnabled ? "enabled" : "disabled"}`);
+    if (opts.allowedIps) {
+        output.dim(`  IPs:  ${opts.allowedIps.join(", ")}`);
+    }
+    if (opts.allowedRecipients) {
+        const parts = [
+            ...(opts.allowedRecipients.evm ?? []),
+            ...(opts.allowedRecipients.solana ?? []),
+        ];
+        output.dim(`  Recipients: ${parts.join(", ")}`);
+    }
     output.dim("  Manage keys at bankr.bot/api");
     return apiKeyResult.apiKey;
 }
@@ -340,6 +373,11 @@ async function siweLoginFlow(apiUrl, opts) {
             partnerApiKey: opts.partnerKey,
             keyName: opts.keyName ?? `SIWE-${new Date().toISOString().slice(0, 10)}`,
             readOnly: opts.readOnly ?? false,
+            walletApiEnabled: opts.walletApi ?? true,
+            agentApiEnabled: opts.agentApi ?? false,
+            tokenLaunchApiEnabled: opts.tokenLaunch ?? true,
+            allowedIps: opts.allowedIps,
+            allowedRecipients: opts.allowedRecipients,
         }),
     });
     if (!verifyRes.ok) {
@@ -397,6 +435,49 @@ async function validateApiKey(apiUrl, apiKey) {
     }
 }
 // ── Main login command ──────────────────────────────────────────────
+function parseAndValidateIps(raw) {
+    const ips = raw
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    const invalid = ips.filter((ip) => isIP(ip) === 0);
+    if (invalid.length > 0) {
+        fatal(`Invalid IP address(es): ${invalid.join(", ")}`);
+    }
+    return ips;
+}
+function parseAndValidateRecipients(raw) {
+    const addrs = raw
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    const evm = [];
+    const solana = [];
+    const invalid = [];
+    for (const addr of addrs) {
+        if (addr.startsWith("0x")) {
+            if (isAddress(addr)) {
+                evm.push(addr);
+            }
+            else {
+                invalid.push(addr);
+            }
+        }
+        else {
+            // Solana: base58, 32-44 chars
+            if (/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(addr)) {
+                solana.push(addr);
+            }
+            else {
+                invalid.push(addr);
+            }
+        }
+    }
+    if (invalid.length > 0) {
+        fatal(`Invalid address(es): ${invalid.join(", ")}`);
+    }
+    return { evm, solana };
+}
 export async function loginCommand(opts) {
     // Fail fast if flags were passed with empty values
     if (opts.apiKey !== undefined && !opts.apiKey.trim()) {
@@ -444,6 +525,17 @@ export async function loginCommand(opts) {
         output.success(`Credentials saved to ${getConfigPath()}`);
         output.dim(`Bankr API URL: ${apiUrl}`);
     }
+    // Lazily parse allowedIps / allowedRecipients only in flows that use them
+    function getParsedRestrictions() {
+        return {
+            allowedIps: opts.allowedIps
+                ? parseAndValidateIps(opts.allowedIps)
+                : undefined,
+            allowedRecipients: opts.allowedRecipients
+                ? parseAndValidateRecipients(opts.allowedRecipients)
+                : undefined,
+        };
+    }
     // --siwe: SIWE login flow (headless agent onboarding)
     if (opts.siwe) {
         if (!opts.privateKey) {
@@ -454,6 +546,10 @@ export async function loginCommand(opts) {
             partnerKey: opts.partnerKey,
             keyName: opts.keyName,
             readOnly: !opts.readWrite,
+            walletApi: opts.walletApi,
+            agentApi: opts.agentApi,
+            tokenLaunch: opts.tokenLaunch,
+            ...getParsedRestrictions(),
         });
         config.apiKey = apiKey;
         if (opts.partnerKey) {
@@ -492,10 +588,20 @@ export async function loginCommand(opts) {
             const privyConfig = await fetchPrivyConfigOrFail(apiUrl);
             await sendOtpWithSpinner(privyConfig, opts.email);
             output.blank();
-            output.info(`Complete login with: bankr login email ${opts.email} --code <code>`);
+            // Build the hint command, including any flags the user passed so they
+            // remember to re-supply them in step 2
+            let hint = `bankr login email ${opts.email} --code <code>`;
+            if (opts.allowedIps)
+                hint += ` --allowed-ips ${opts.allowedIps}`;
+            if (opts.allowedRecipients)
+                hint += ` --allowed-recipients ${opts.allowedRecipients}`;
+            output.info(`Complete login with: ${hint}`);
             return;
         }
-        const apiKey = await emailLoginFlow(apiUrl, opts);
+        const apiKey = await emailLoginFlow(apiUrl, {
+            ...opts,
+            ...getParsedRestrictions(),
+        });
         output.blank();
         saveCredentials(apiKey, opts.llmKey);
         return;

package/dist/commands/portfolio.d.ts

@@ -0,0 +1,9 @@
+export declare function portfolioCommand(opts: {
+    chain?: string;
+    json?: boolean;
+    lowValue?: boolean;
+    pnl?: boolean;
+    nfts?: boolean;
+    all?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=portfolio.d.ts.map