@getalby/cli 0.2.3 → 0.3.0

package/README.md

@@ -6,8 +6,58 @@ Built for agents - use with the [Alby Bitcoin Payments CLI Skill](https://github
 
 ## Usage
 
+### First-time setup
+
+The CLI is an interface to a wallet and therefore needs a connection secret.
+
+**Option 1: `auth` — for wallets that support it (e.g. Alby Hub)**
+
+```bash
+# Step 1: generate a connection URL and open it in your wallet to approve
+# --app-name is the name of the agent/app that will use the wallet via the CLI (e.g. "Claude Code", "OpenClaw")
+npx @getalby/cli auth https://my.albyhub.com --app-name "Claude Code"
+
+# Step 2: after approving in the wallet, complete the connection
+npx @getalby/cli auth --complete
+```
+
+**Option 2: `connect` — paste a NWC connection secret directly**
+
+```bash
+npx @getalby/cli connect "nostr+walletconnect://..."
+```
+
+### Multiple wallets
+
+Use `--wallet-name` when setting up to save named connections:
+
+```bash
+npx @getalby/cli connect "nostr+walletconnect://..." --wallet-name work
+npx @getalby/cli auth https://my.albyhub.com --app-name "Claude Code" --wallet-name personal
+```
+
+Then pass `--wallet-name` to any command to use that wallet:
+
+```bash
+npx @getalby/cli --wallet-name work get-balance
+npx @getalby/cli --wallet-name personal pay-invoice --invoice lnbc...
+```
+
+### Connection secret resolution (in order of priority)
+
+1. `--connection-secret` flag (value or path to file)
+2. `--wallet-name` flag (`~/.alby-cli/connection-secret-<name>.key`)
+3. `NWC_URL` environment variable
+4. `~/.alby-cli/connection-secret.key` (default file location)
+
 ```bash
-# Pass a file path to a connection secret (preferred)
+# Use the default saved wallet connection (preferred)
+npx @getalby/cli <command> [options]
+
+# Use a named wallet
+npx @getalby/cli --wallet-name alice <command> [options]
+
+# Pass a file path to a connection secret
 npx @getalby/cli -c /path/to/secret.txt <command> [options]
 
 # Or pass connection string directly
@@ -16,7 +66,7 @@ npx @getalby/cli -c "nostr+walletconnect://..." <command> [options]
 
 The `-c` option auto-detects whether you're passing a connection string or a file path. You can get a connection string from your NWC-compatible wallet (e.g., [Alby](https://getalby.com)).
 
-You can also pass a connection string via the `NWC_URL` environment variable instead of using the `-c` option:
+You can also set the `NWC_URL` environment variable instead of using the `-c` option:
 
 ```txt
 NWC_URL="nostr+walletconnect://..."
@@ -42,7 +92,7 @@ curl -X POST "https://faucet.nwc.dev/wallets/<username>/topup?amount=5000"
 
 ### Wallet Commands
 
-These commands require `--connection-secret`:
+These commands require a wallet connection (`-c`, `--wallet-name`, or `NWC_URL`):
 
 ```bash
 # Get wallet balance
@@ -122,7 +172,7 @@ npx @getalby/cli request-invoice-from-lightning-address --address "hello@getalby
 
 ### Wallet Commands
 
-These require `-c` or `--connection-secret`:
+These require a wallet connection (`-c`, `--wallet-name`, or `NWC_URL`):
 
 | Command                   | Description                    | Required Options                |
 | ------------------------- | ------------------------------ | ------------------------------- |
@@ -141,7 +191,7 @@ These require `-c` or `--connection-secret`:
 
 ### HOLD Invoice Commands
 
-These require `-c` or `--connection-secret`:
+These require a wallet connection (`-c`, `--wallet-name`, or `NWC_URL`):
 
 | Command               | Description           | Required Options             |
 | --------------------- | --------------------- | ---------------------------- |

package/build/commands/auth.js

@@ -0,0 +1,66 @@
+import { NWCClient } from "@getalby/sdk";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getConnectionSecretPath, getPendingConnectionRelayPath, getPendingConnectionSecretPath, handleError, } from "../utils.js";
+import { generateSecretKey, getPublicKey } from "nostr-tools";
+import { bytesToHex, hexToBytes } from "@noble/hashes/utils.js";
+export function registerAuthCommand(program) {
+    program
+        .command("auth <wallet-url>")
+        .description("Securely connect a wallet with human confirmation via the browser\n\n" +
+        "  Step 1: npx @getalby/cli auth https://my.albyhub.com --app-name MyApp\n" +
+        "  Step 2: after human confirmation, run any command to finalize the connection")
+        .option("--app-name <name>", 'Name of the agent or app that will use this wallet (e.g. "Claude Code")')
+        .option("--relay-url <url>", "Relay URL for the pending connection", "wss://relay.getalby.com/v1")
+        .option("--force", "Overwrite existing connection secret")
+        .option("--remove-pending", "Remove a pending connection and start fresh")
+        .action(async (walletUrl, options) => {
+        await handleError(async () => {
+            const walletName = program.opts().walletName;
+            const connectionSecretPath = getConnectionSecretPath(walletName);
+            const pendingSecretPath = getPendingConnectionSecretPath(walletName);
+            const pendingRelayPath = getPendingConnectionRelayPath(walletName);
+            // Remove pending connection
+            if (options.removePending) {
+                if (!existsSync(pendingSecretPath)) {
+                    console.log(`No pending connection found at ${pendingSecretPath}`);
+                }
+                else {
+                    rmSync(pendingSecretPath);
+                    console.log(`Removed pending connection at ${pendingSecretPath}`);
+                }
+                if (existsSync(pendingRelayPath)) {
+                    rmSync(pendingRelayPath);
+                }
+                return;
+            }
+            // Generate auth URL
+            if (!options.appName) {
+                console.error(`Error: No app name provided.\n` +
+                    `Add --app-name <name> to identify the app in the wallet.`);
+                process.exit(1);
+            }
+            if (existsSync(connectionSecretPath) && !options.force) {
+                console.error(`Error: Already connected. Connection secret exists at ${connectionSecretPath}\n` +
+                    `To overwrite, use --force.`);
+                process.exit(1);
+            }
+            const secret = bytesToHex(generateSecretKey());
+            const pubkey = getPublicKey(hexToBytes(secret));
+            const authUrl = NWCClient.getAuthorizationUrl(`${walletUrl}/apps/new`, { name: options.appName }, pubkey).toString();
+            const dir = join(homedir(), ".alby-cli");
+            if (!existsSync(dir)) {
+                mkdirSync(dir, { recursive: true });
+            }
+            writeFileSync(pendingSecretPath, secret, { mode: 0o600 });
+            writeFileSync(pendingRelayPath, options.relayUrl, { mode: 0o600 });
+            console.log("Click the following URL to approve the connection in your wallet:\n" +
+                authUrl);
+            const retryCmd = walletName
+                ? `npx @getalby/cli get-balance --wallet-name ${walletName}`
+                : `npx @getalby/cli get-balance`;
+            console.log(`\nOnce approved, run any command, e.g.:\n  ${retryCmd}`);
+        });
+    });
+}

package/build/commands/cancel-hold-invoice.js

@@ -7,7 +7,7 @@ export function registerCancelHoldInvoiceCommand(program) {
         .requiredOption("--payment-hash <hex>", "Payment hash (32 bytes hex)")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await cancelHoldInvoice(client, {
                 payment_hash: options.paymentHash,
             });

package/build/commands/connect.js

@@ -0,0 +1,46 @@
+import { NWCClient } from "@getalby/sdk";
+import { existsSync } from "node:fs";
+import { getConnectionSecretPath, handleError, saveConnectionSecret, testAndLogConnection, } from "../utils.js";
+export function registerConnectCommand(program) {
+    program
+        .command('connect "[connection-secret]"')
+        .description("Connect to a Nostr Wallet Connect wallet")
+        .option("--force", "Overwrite existing connection secret")
+        .action(async (connectionSecret, options) => {
+        await handleError(async () => {
+            const connectionSecretPath = getConnectionSecretPath(program.opts().walletName);
+            if (existsSync(connectionSecretPath) && !options.force) {
+                console.error(`Error: Already connected. Connection secret exists at ${connectionSecretPath}\n` +
+                    `To overwrite, use --force.`);
+                process.exit(1);
+            }
+            if (!connectionSecret) {
+                console.error(`Usage: npx @getalby/cli connect "<connection-secret>"\n` +
+                    `Provide a NWC connection secret (nostr+walletconnect://...)`);
+                process.exit(1);
+            }
+            if (!connectionSecret.startsWith("nostr+walletconnect://")) {
+                console.error(`Error: Invalid connection secret. Expected format: nostr+walletconnect://...`);
+                process.exit(1);
+            }
+            const client = new NWCClient({
+                nostrWalletConnectUrl: connectionSecret,
+            });
+            if (!client.secret || !/^[0-9a-f]{64}$/i.test(client.secret)) {
+                console.error(`Error: Invalid connection secret. Missing or invalid secret key.`);
+                process.exit(1);
+            }
+            if (!client.walletPubkey ||
+                !/^[0-9a-f]{64}$/i.test(client.walletPubkey)) {
+                console.error(`Error: Invalid connection secret. Missing or invalid wallet pubkey.`);
+                process.exit(1);
+            }
+            if (!client.relayUrls?.length) {
+                console.error(`Error: Invalid connection secret. Missing relay URL.`);
+                process.exit(1);
+            }
+            await testAndLogConnection(client);
+            saveConnectionSecret(connectionSecretPath, connectionSecret, program.opts().verbose);
+        });
+    });
+}

package/build/commands/fetch-l402.js

@@ -10,7 +10,7 @@ export function registerFetchL402Command(program) {
         .option("-H, --headers <json>", "Additional headers (JSON string)")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await fetchL402(client, {
                 url: options.url,
                 method: options.method,

package/build/commands/get-balance.js

@@ -6,7 +6,7 @@ export function registerGetBalanceCommand(program) {
         .description("Get wallet balance")
         .action(async () => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await getBalance(client);
             output(result);
         });

package/build/commands/get-budget.js

@@ -6,7 +6,7 @@ export function registerGetBudgetCommand(program) {
         .description("Get wallet budget information")
         .action(async () => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await getBudget(client);
             output(result);
         });

package/build/commands/get-info.js

@@ -6,7 +6,7 @@ export function registerGetInfoCommand(program) {
         .description("Get wallet info")
         .action(async () => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await getInfo(client);
             output(result);
         });

package/build/commands/get-wallet-service-info.js

@@ -6,7 +6,7 @@ export function registerGetWalletServiceInfoCommand(program) {
         .description("Get wallet service capabilities")
         .action(async () => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await getWalletServiceInfo(client);
             output(result);
         });

package/build/commands/list-transactions.js

@@ -12,7 +12,7 @@ export function registerListTransactionsCommand(program) {
         .option("-t, --type <type>", "Filter by type (incoming|outgoing)")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await listTransactions(client, {
                 from: options.from,
                 until: options.until,

package/build/commands/lookup-invoice.js

@@ -12,7 +12,7 @@ export function registerLookupInvoiceCommand(program) {
                 console.error("Error: --payment-hash or --invoice is required");
                 process.exit(1);
             }
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await lookupInvoice(client, {
                 payment_hash: options.paymentHash,
                 invoice: options.invoice,

package/build/commands/make-hold-invoice.js

@@ -10,7 +10,7 @@ export function registerMakeHoldInvoiceCommand(program) {
         .option("-e, --expiry <seconds>", "Expiry time in seconds", parseInt)
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await makeHoldInvoice(client, {
                 amount_in_sats: options.amount,
                 payment_hash: options.paymentHash,

package/build/commands/make-invoice.js

@@ -9,7 +9,7 @@ export function registerMakeInvoiceCommand(program) {
         .option("-e, --expiry <seconds>", "Expiry time in seconds", parseInt)
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await makeInvoice(client, {
                 amount_in_sats: options.amount,
                 description: options.description,

package/build/commands/pay-invoice.js

@@ -8,7 +8,7 @@ export function registerPayInvoiceCommand(program) {
         .option("-a, --amount <sats>", "Amount (for zero-amount invoices)", parseInt)
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await payInvoice(client, {
                 invoice: options.invoice,
                 amount_in_sats: options.amount,

package/build/commands/pay-keysend.js

@@ -10,7 +10,7 @@ export function registerPayKeysendCommand(program) {
         .option("--tlv-records <json>", "TLV records as JSON array [{type, value}]")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             let tlvRecords;
             if (options.tlvRecords) {
                 tlvRecords = JSON.parse(options.tlvRecords);

package/build/commands/settle-hold-invoice.js

@@ -7,7 +7,7 @@ export function registerSettleHoldInvoiceCommand(program) {
         .requiredOption("--preimage <hex>", "Preimage (32 bytes hex)")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await settleHoldInvoice(client, {
                 preimage: options.preimage,
             });

package/build/commands/sign-message.js

@@ -7,7 +7,7 @@ export function registerSignMessageCommand(program) {
         .requiredOption("-m, --message <text>", "Message to sign")
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await signMessage(client, {
                 message: options.message,
             });

package/build/commands/wait-for-payment.js

@@ -9,7 +9,7 @@ export function registerWaitForPaymentCommand(program) {
         .option("--timeout <seconds>", "Timeout in seconds", parseInt)
         .action(async (options) => {
         await handleError(async () => {
-            const client = getClient(program);
+            const client = await getClient(program);
             const result = await waitForPayment(client, {
                 payment_hash: options.paymentHash,
                 type: options.type,

package/build/index.js

@@ -20,37 +20,61 @@ import { registerParseInvoiceCommand } from "./commands/parse-invoice.js";
 import { registerVerifyPreimageCommand } from "./commands/verify-preimage.js";
 import { registerRequestInvoiceFromLightningAddressCommand } from "./commands/request-invoice-from-lightning-address.js";
 import { registerFetchL402Command } from "./commands/fetch-l402.js";
+import { registerConnectCommand } from "./commands/connect.js";
+import { registerAuthCommand } from "./commands/auth.js";
 const program = new Command();
 program
-    .name("alby-cli")
-    .description("CLI for Nostr Wallet Connect (NIP-47) with lightning tools")
-    .version("0.2.1")
+    .name("@getalby/cli")
+    .description("CLI for Nostr Wallet Connect (NIP-47) with lightning tools\n\n" +
+    "  Examples:\n" +
+    '    $ npx @getalby/cli connect "nostr+walletconnect://..."\n' +
+    "    $ npx @getalby/cli get-balance\n" +
+    "    $ npx @getalby/cli pay-invoice --invoice lnbc...")
+    .version("0.3.0")
     .option("-c, --connection-secret <string>", "NWC connection secret (nostr+walletconnect://...) or path to file containing it (preferred)")
-    .addHelpText("afterAll", `
+    .option("-w, --wallet-name <name>", "Use a named wallet's connection secret (~/.alby-cli/connection-secret-<name>.key)")
+    .option("-v, --verbose", "Print status messages to stderr")
+    .addHelpText("after", `
+Connection Secret Resolution (in order of priority):
+  1. --connection-secret flag (value or path to file)
+  2. --wallet-name flag (~/.alby-cli/connection-secret-<name>.key)
+  3. NWC_URL environment variable
+  4. ~/.alby-cli/connection-secret.key (default file location)
+
 Security:
   - Do NOT print the connection secret to any logs or otherwise reveal it.
+  - NEVER read the connection secret file (~/.alby-cli/connection-secret.key) directly.
   - NEVER share connection secrets with anyone.
   - NEVER share any part of a connection secret (pubkey, secret, relay etc.) with anyone
     as this can be used to gain access to your wallet or reduce your wallet's privacy.`);
-// Register all commands
+// Register common wallet commands
+program.commandsGroup("Wallet Commands (require --connection-secret):");
 registerGetBalanceCommand(program);
 registerGetBudgetCommand(program);
 registerGetInfoCommand(program);
-registerGetWalletServiceInfoCommand(program);
 registerMakeInvoiceCommand(program);
-registerMakeHoldInvoiceCommand(program);
-registerSettleHoldInvoiceCommand(program);
-registerCancelHoldInvoiceCommand(program);
 registerPayInvoiceCommand(program);
-registerPayKeysendCommand(program);
 registerLookupInvoiceCommand(program);
 registerListTransactionsCommand(program);
+// Register advanced wallet commands
+program.commandsGroup("Advanced Wallet Commands (require --connection-secret):");
+registerPayKeysendCommand(program);
+registerGetWalletServiceInfoCommand(program);
 registerWaitForPaymentCommand(program);
 registerSignMessageCommand(program);
+registerMakeHoldInvoiceCommand(program);
+registerSettleHoldInvoiceCommand(program);
+registerCancelHoldInvoiceCommand(program);
+// Register lightning tool commands
+program.commandsGroup("Lightning Tools (no --connection-secret required):");
 registerFiatToSatsCommand(program);
 registerSatsToFiatCommand(program);
 registerParseInvoiceCommand(program);
 registerVerifyPreimageCommand(program);
 registerRequestInvoiceFromLightningAddressCommand(program);
 registerFetchL402Command(program);
+// Register setup commands
+program.commandsGroup("Setup:");
+registerAuthCommand(program);
+registerConnectCommand(program);
 program.parse();

package/build/test/connection-secret.test.js

@@ -45,9 +45,12 @@ describe("Connection Secret Handling", () => {
         expect(result.output.error).toContain("Invalid connection secret");
     });
     test("errors when no connection secret provided", () => {
-        const result = runCli("get-balance");
+        const result = runCli("get-balance", {
+            HOME: "/nonexistent-test-home",
+            NWC_URL: "",
+        });
         expect(result.success).toBe(false);
-        expect(result.output.error).toContain("--connection-secret is required");
+        expect(result.output.error).toContain("No connection secret provided");
     });
     test("errors when connection string is malformed", () => {
         const result = runCli(`-c "nostr+walletconnect://asdf" get-balance`);

package/build/utils.js

@@ -1,15 +1,119 @@
-import { NWCClient } from "@getalby/sdk";
-import { readFileSync } from "node:fs";
-export function getClient(program) {
+import { NWAClient, NWCClient } from "@getalby/sdk";
+import { getInfo } from "./tools/nwc/get_info.js";
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function sanitizeWalletName(name) {
+    return name.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+export function getConnectionSecretPath(name) {
+    const filename = name
+        ? `connection-secret-${sanitizeWalletName(name)}.key`
+        : "connection-secret.key";
+    return join(homedir(), ".alby-cli", filename);
+}
+export function getPendingConnectionSecretPath(name) {
+    const filename = name
+        ? `pending-connection-secret-${sanitizeWalletName(name)}.key`
+        : "pending-connection-secret.key";
+    return join(homedir(), ".alby-cli", filename);
+}
+export function getPendingConnectionRelayPath(name) {
+    const filename = name
+        ? `pending-connection-relay-${sanitizeWalletName(name)}.txt`
+        : "pending-connection-relay.txt";
+    return join(homedir(), ".alby-cli", filename);
+}
+export function saveConnectionSecret(path, secret, verbose) {
+    const alreadyExists = existsSync(path);
+    const dir = join(homedir(), ".alby-cli");
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    writeFileSync(path, secret, { mode: 0o600 });
+    if (alreadyExists) {
+        chmodSync(path, 0o600);
+    }
+    if (verbose) {
+        console.error(`Connection saved to ${path}`);
+    }
+}
+export async function testAndLogConnection(client) {
+    console.log("Testing connection...");
+    const info = await getInfo(client);
+    console.log(`Connected to ${info.alias || "wallet"} (${info.network || "unknown network"})`);
+}
+export async function completePendingConnection(pendingSecretPath, connectionSecretPath, relayUrl, verbose, pendingRelayPath) {
+    const secret = readFileSync(pendingSecretPath, "utf-8").trim();
+    const DEFAULT_RELAY = "wss://relay.getalby.com/v1";
+    if (!relayUrl && pendingRelayPath && existsSync(pendingRelayPath)) {
+        relayUrl = readFileSync(pendingRelayPath, "utf-8").trim();
+    }
+    const resolvedRelay = relayUrl ?? DEFAULT_RELAY;
+    const nwaClient = new NWAClient({
+        appSecretKey: secret,
+        relayUrls: [resolvedRelay],
+        requestMethods: [],
+    });
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            unsub?.();
+            reject(new Error("Timed out waiting for wallet approval.\n\nTo retry, run the command again.\nTo cancel: npx @getalby/cli auth --remove-pending"));
+        }, 5000);
+        let unsub;
+        nwaClient
+            .subscribe({
+            onSuccess: async (nwcClient) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                unsub?.();
+                saveConnectionSecret(connectionSecretPath, nwcClient.getNostrWalletConnectUrl(), verbose);
+                rmSync(pendingSecretPath);
+                if (pendingRelayPath && existsSync(pendingRelayPath)) {
+                    rmSync(pendingRelayPath);
+                }
+                resolve(nwcClient);
+            },
+        })
+            .then(({ unsub: u }) => {
+            unsub = u;
+        });
+    });
+}
+export async function getClient(program) {
     const opts = program.opts();
     let connectionSecret = opts.connectionSecret;
-    // Check environment variables if --connection-secret not provided
-    if (!connectionSecret) {
+    const walletName = opts.walletName;
+    const connectionPath = getConnectionSecretPath(walletName);
+    const pendingPath = getPendingConnectionSecretPath(walletName);
+    if (!connectionSecret && !walletName) {
         connectionSecret = process.env.NWC_URL;
     }
     if (!connectionSecret) {
-        console.error("Error: --connection-secret is required for this command");
-        process.exit(1);
+        try {
+            connectionSecret = readFileSync(connectionPath, "utf-8").trim();
+        }
+        catch (error) {
+            const err = error;
+            if (err.code !== "ENOENT")
+                throw err;
+        }
+    }
+    if (!connectionSecret && existsSync(pendingPath)) {
+        if (opts.verbose) {
+            console.error("Pending connection found. Waiting for wallet approval...");
+        }
+        const pendingRelayPath = getPendingConnectionRelayPath(walletName);
+        return await completePendingConnection(pendingPath, connectionPath, undefined, opts.verbose, pendingRelayPath);
+    }
+    if (!connectionSecret) {
+        throw new Error("No connection secret provided. Pass -c <secret or file path>, set NWC_URL, use --wallet-name <name>, or create ~/.alby-cli/connection-secret.key");
     }
     // Auto-detect: if it doesn't start with the protocol, treat as file path
     if (!connectionSecret.startsWith("nostr+walletconnect://")) {

package/package.json

@@ -2,12 +2,11 @@
   "name": "@getalby/cli",
   "description": "CLI for Nostr Wallet Connect (NIP-47) with a few additional useful lightning tools",
   "repository": "https://github.com/getAlby/cli.git",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "type": "module",
   "main": "build/index.js",
   "bin": {
-    "cli": "build/index.js",
-    "alby-cli": "build/index.js"
+    "cli": "build/index.js"
   },
   "files": [
     "build/**/*"
@@ -33,10 +32,15 @@
   ],
   "author": "Alby contributors",
   "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
   "dependencies": {
     "@getalby/lightning-tools": "^7.0.2",
     "@getalby/sdk": "^7.0.0",
-    "commander": "^13.1.0"
+    "@noble/hashes": "^2.0.1",
+    "commander": "^14.0.3",
+    "nostr-tools": "^2.23.3"
   },
   "devDependencies": {
     "@types/node": "^25.2.0",