@getalby/cli 0.0.1 → 0.1.0

package/README.md

@@ -5,10 +5,14 @@ CLI for Nostr Wallet Connect (NIP-47) with lightning tools.
 ## Usage
 
 ```bash
-npx @getalby/cli --connection-secret <NWC_CONNECTION_STRING> <command> [options]
+# Pass a file path to a connection secret (preferred)
+npx @getalby/cli -c /path/to/secret.txt <command> [options]
+
+# Or pass connection string directly
+npx @getalby/cli -c "nostr+walletconnect://..." <command> [options]
 ```
 
-The `--connection-secret` (or `-c`) option is required for wallet operations. You can get a connection string from your NWC-compatible wallet (e.g., [Alby](https://getalby.com)).
+The `-c` option auto-detects whether you're passing a connection string or a file path. You can get a connection string from your NWC-compatible wallet (e.g., [Alby](https://getalby.com)).
 
 ## Testing Wallet
 
@@ -110,44 +114,44 @@ npx @getalby/cli request-invoice-from-lightning-address --address "hello@getalby
 
 ### Wallet Commands
 
-These require `--connection-secret`:
-
-| Command | Description | Required Options |
-|---------|-------------|------------------|
-| `get-balance` | Get wallet balance | - |
-| `get-info` | Get wallet info | - |
-| `get-wallet-service-info` | Get wallet capabilities | - |
-| `get-budget` | Get wallet budget | - |
-| `make-invoice` | Create a lightning invoice | `--amount` |
-| `pay-invoice` | Pay a lightning invoice | `--invoice` |
-| `pay-keysend` | Send a keysend payment | `--pubkey`, `--amount` |
-| `lookup-invoice` | Look up an invoice | `--payment-hash` or `--invoice` |
-| `list-transactions` | List transactions | - |
-| `sign-message` | Sign a message with wallet key | `--message` |
-| `wait-for-payment` | Wait for payment notification | `--payment-hash` |
-| `fetch-l402` | Fetch L402-protected resource | `--url` |
+These require `-c` or `--connection-secret`:
+
+| Command                   | Description                    | Required Options                |
+| ------------------------- | ------------------------------ | ------------------------------- |
+| `get-balance`             | Get wallet balance             | -                               |
+| `get-info`                | Get wallet info                | -                               |
+| `get-wallet-service-info` | Get wallet capabilities        | -                               |
+| `get-budget`              | Get wallet budget              | -                               |
+| `make-invoice`            | Create a lightning invoice     | `--amount`                      |
+| `pay-invoice`             | Pay a lightning invoice        | `--invoice`                     |
+| `pay-keysend`             | Send a keysend payment         | `--pubkey`, `--amount`          |
+| `lookup-invoice`          | Look up an invoice             | `--payment-hash` or `--invoice` |
+| `list-transactions`       | List transactions              | -                               |
+| `sign-message`            | Sign a message with wallet key | `--message`                     |
+| `wait-for-payment`        | Wait for payment notification  | `--payment-hash`                |
+| `fetch-l402`              | Fetch L402-protected resource  | `--url`                         |
 
 ### HOLD Invoice Commands
 
-These require `--connection-secret`:
+These require `-c` or `--connection-secret`:
 
-| Command | Description | Required Options |
-|---------|-------------|------------------|
-| `make-hold-invoice` | Create a HOLD invoice | `--amount`, `--payment-hash` |
-| `settle-hold-invoice` | Settle a HOLD invoice | `--preimage` |
-| `cancel-hold-invoice` | Cancel a HOLD invoice | `--payment-hash` |
+| Command               | Description           | Required Options             |
+| --------------------- | --------------------- | ---------------------------- |
+| `make-hold-invoice`   | Create a HOLD invoice | `--amount`, `--payment-hash` |
+| `settle-hold-invoice` | Settle a HOLD invoice | `--preimage`                 |
+| `cancel-hold-invoice` | Cancel a HOLD invoice | `--payment-hash`             |
 
 ### Lightning Tools
 
 These don't require a wallet connection:
 
-| Command | Description | Required Options |
-|---------|-------------|------------------|
-| `fiat-to-sats` | Convert fiat to sats | `--currency`, `--amount` |
-| `sats-to-fiat` | Convert sats to fiat | `--amount`, `--currency` |
-| `parse-invoice` | Parse a BOLT-11 invoice | `--invoice` |
-| `verify-preimage` | Verify preimage against invoice | `--invoice`, `--preimage` |
-| `request-invoice-from-lightning-address` | Request invoice from lightning address | `--address`, `--amount` |
+| Command                                  | Description                            | Required Options          |
+| ---------------------------------------- | -------------------------------------- | ------------------------- |
+| `fiat-to-sats`                           | Convert fiat to sats                   | `--currency`, `--amount`  |
+| `sats-to-fiat`                           | Convert sats to fiat                   | `--amount`, `--currency`  |
+| `parse-invoice`                          | Parse a BOLT-11 invoice                | `--invoice`               |
+| `verify-preimage`                        | Verify preimage against invoice        | `--invoice`, `--preimage` |
+| `request-invoice-from-lightning-address` | Request invoice from lightning address | `--address`, `--amount`   |
 
 ## Output
 

package/build/index.js

@@ -24,8 +24,8 @@ const program = new Command();
 program
     .name("alby-cli")
     .description("CLI for Nostr Wallet Connect (NIP-47) with lightning tools")
-    .version("0.0.0")
-    .option("-c, --connection-secret <string>", "NWC connection secret (nostr+walletconnect://...)");
+    .version("0.1.0")
+    .option("-c, --connection-secret <string>", "NWC connection secret (nostr+walletconnect://...) or path to file containing it (preferred)");
 // Register all commands
 registerGetBalanceCommand(program);
 registerGetBudgetCommand(program);

package/build/test/connection-secret.test.js

@@ -0,0 +1,57 @@
+import { describe, test, expect, beforeAll, afterAll } from "vitest";
+import { createTestWallet, runCli } from "./helpers.js";
+import { writeFileSync, unlinkSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+describe("Connection Secret Handling", () => {
+    let wallet;
+    let secretFilePath;
+    let badSecretFilePath;
+    beforeAll(async () => {
+        wallet = await createTestWallet();
+        // Create temp file with valid connection secret
+        secretFilePath = join(tmpdir(), `nwc-test-secret-${Date.now()}.txt`);
+        writeFileSync(secretFilePath, wallet.nwcUrl);
+        // Create temp file with invalid/truncated content
+        badSecretFilePath = join(tmpdir(), `nwc-test-bad-secret-${Date.now()}.txt`);
+        writeFileSync(badSecretFilePath, "nostr+wallet");
+    }, 60000);
+    afterAll(() => {
+        try {
+            unlinkSync(secretFilePath);
+        }
+        catch { }
+        try {
+            unlinkSync(badSecretFilePath);
+        }
+        catch { }
+    });
+    test("accepts connection string directly", () => {
+        const result = runCli(`-c "${wallet.nwcUrl}" get-balance`);
+        expect(result.success).toBe(true);
+    });
+    test("reads connection secret from file", () => {
+        const result = runCli(`-c "${secretFilePath}" get-balance`);
+        expect(result.success).toBe(true);
+    });
+    test("errors when file does not exist", () => {
+        const result = runCli(`-c "/tmp/nonexistent-file-${Date.now()}" get-balance`);
+        expect(result.success).toBe(false);
+        expect(result.output.error).toContain("Failed to read connection secret file");
+    });
+    test("errors when file contains invalid connection string", () => {
+        const result = runCli(`-c "${badSecretFilePath}" get-balance`);
+        expect(result.success).toBe(false);
+        expect(result.output.error).toContain("Invalid connection secret");
+    });
+    test("errors when no connection secret provided", () => {
+        const result = runCli("get-balance");
+        expect(result.success).toBe(false);
+        expect(result.output.error).toContain("--connection-secret is required");
+    });
+    test("errors when connection string is malformed", () => {
+        const result = runCli(`-c "nostr+walletconnect://asdf" get-balance`);
+        expect(result.success).toBe(false);
+        expect(result.output.error).toContain("Invalid connection secret");
+    });
+});

package/build/utils.js

@@ -1,12 +1,47 @@
 import { NWCClient } from "@getalby/sdk";
+import { readFileSync } from "node:fs";
 export function getClient(program) {
     const opts = program.opts();
-    const connectionSecret = opts.connectionSecret;
+    let connectionSecret = opts.connectionSecret;
     if (!connectionSecret) {
         console.error("Error: --connection-secret is required for this command");
         process.exit(1);
     }
-    return new NWCClient({ nostrWalletConnectUrl: connectionSecret });
+    // Auto-detect: if it doesn't start with the protocol, treat as file path
+    if (!connectionSecret.startsWith("nostr+walletconnect://")) {
+        try {
+            connectionSecret = readFileSync(connectionSecret, "utf-8").trim();
+        }
+        catch (error) {
+            console.error(`Error: Failed to read connection secret file "${opts.connectionSecret}": ${error instanceof Error ? error.message : String(error)}`);
+            process.exit(1);
+        }
+    }
+    // Validate the connection string format
+    if (!connectionSecret.startsWith("nostr+walletconnect://")) {
+        console.error(`Error: Invalid connection secret. Expected format: nostr+walletconnect://...\n` +
+            `Got: "${connectionSecret.substring(0, 50)}${connectionSecret.length > 50 ? "..." : ""}"\n` +
+            `Hint: Make sure the connection string is complete and not truncated.`);
+        process.exit(1);
+    }
+    const client = new NWCClient({ nostrWalletConnectUrl: connectionSecret });
+    // Validate client properties
+    if (!client.secret || !/^[0-9a-f]{64}$/i.test(client.secret)) {
+        console.error(`Error: Invalid connection secret. Missing or invalid secret key.\n` +
+            `Hint: Make sure the connection string is complete and not truncated.`);
+        process.exit(1);
+    }
+    if (!client.walletPubkey || !/^[0-9a-f]{64}$/i.test(client.walletPubkey)) {
+        console.error(`Error: Invalid connection secret. Missing or invalid wallet pubkey.\n` +
+            `Hint: Make sure the connection string is complete and not truncated.`);
+        process.exit(1);
+    }
+    if (!client.relayUrls) {
+        console.error(`Error: Invalid connection secret. Missing relay URL.\n` +
+            `Hint: Make sure the connection string is complete and not truncated.`);
+        process.exit(1);
+    }
+    return client;
 }
 export function output(data) {
     console.log(JSON.stringify(data, null, 2));

package/package.json

@@ -2,7 +2,7 @@
   "name": "@getalby/cli",
   "description": "CLI for Nostr Wallet Connect (NIP-47) with a few additional useful lightning tools",
   "repository": "https://github.com/getAlby/cli.git",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "type": "module",
   "main": "build/index.js",
   "bin": {