@slothmoney/agent-cli 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 ## Unreleased
 
+- Read personal or joint budget periods with categories, line items, funding,
+  and planned amounts.
+- Preview or apply planned line-item updates that overwrite the selected period
+  and all explicit future plans.
+
+## 0.6.0 - 2026-08-08
+
+- Expose goal-savings membership on account inventory rows and preview or apply
+  owner-authorized changes through opaque account references.
+- Read cache-only linked investment portfolios with provider-native holdings,
+  quantities, valuations, currencies, and freshness metadata.
+- Keep strict response validation, JSON-only stdout, command-specific help,
+  and clean-install package coverage synchronized with Agent API v1.
+
 ## 0.5.0 - 2026-08-07
 
 - Create and rename custom categories, with existing icon and category type

package/README.md

@@ -1,6 +1,6 @@
 # Sloth Agent CLI
 
-Use your own agent to inspect known accounts, manage goals, and categorise transactions through the
+Use your own agent to inspect accounts, investments, and budgets, manage goals, update planned amounts, and categorise transactions through the
 [Sloth Money Agent API](https://slothmoney.app/developers/).
 
 ## Install
@@ -15,7 +15,7 @@ sloth-agent --version
 For a one-off pinned run:
 
 ```bash
-npm exec --yes --package=@slothmoney/agent-cli@0.5.0 -- sloth-agent --help
+npm exec --yes --package=@slothmoney/agent-cli@0.7.0 -- sloth-agent --help
 ```
 
 ## Authenticate
@@ -24,10 +24,10 @@ Create a personal access token in Sloth Money under
 **Settings > Developer access**, then choose the authentication method for
 where the CLI runs.
 
-New tokens are view-only. That is enough for `auth status`, `accounts`,
-`categories`, `transactions`, and `goals` list. Enable **Allow changes** when
+New tokens are view-only. That is enough for `auth status`, `accounts`, `investments`,
+`budget`, `categories`, `transactions`, and `goals` list. Enable **Allow changes** when
 creating the token only if the CLI must apply assignments, manage categories
-or line items, ask a partner for an explanation, or manage goals. Token
+or line items, update planned budgets, change goal-savings account membership, ask a partner for an explanation, or manage goals. Token
 permissions cannot be changed later - revoke and reissue the token instead.
 
 ### Local computer
@@ -103,6 +103,8 @@ options, output, and examples:
 ```bash
 sloth-agent auth login --help
 sloth-agent accounts --help
+sloth-agent budget --help
+sloth-agent budget update --help
 sloth-agent categories --help
 sloth-agent categories create --help
 sloth-agent line-items create --help
@@ -184,6 +186,53 @@ query. Assignments do not create a separate list.
 
 ### Other workflows
 
+Read a personal or joint budget. Omit `--period` to use Sloth's current budget period:
+
+```bash
+sloth-agent budget --scope personal --period 2026-08
+```
+
+The result includes the budget period and status, currency, the effective plan,
+stored funding amounts when available, categories, line items, and planned
+amounts in pence.
+
+Update selected line-item amounts by creating `budget.json`:
+
+```json
+{
+  "allocations": [
+    {
+      "categoryId": "groceries",
+      "lineItemId": "weekly",
+      "plannedPence": 45000
+    }
+  ]
+}
+```
+
+Preview locally, then apply the same file:
+
+```bash
+sloth-agent budget update \
+  --scope personal \
+  --period 2026-08 \
+  --input budget.json
+
+sloth-agent budget update \
+  --scope personal \
+  --period 2026-08 \
+  --input budget.json \
+  --apply
+```
+
+The update starts from the complete selected-period budget, changes the listed
+line items, then overwrites the selected period and every explicit future plan
+with that complete result. A later update from another period overwrites that
+period and everything after it. Earlier and historical periods remain unchanged.
+
+Without `--apply`, the CLI validates the file locally and does not load a token
+or contact Sloth Money. Applying requires a write-enabled token.
+
 Create or rename a custom category. Writes are previews until `--apply` is
 present:
 
@@ -250,11 +299,41 @@ sloth-agent accounts
 The command is read-only and cache-only: it does not refresh linked banks or
 change account data. Each result contains an opaque `accountRef`, personal or
 joint ownership, connected or manual source, native balance/currency when
-known, `lastBalanceUpdatedAt`, and `connectionState`. Missing values are JSON
+known, `lastBalanceUpdatedAt`, `connectionState`, and `isGoalSavingsSource`.
+Missing values are JSON
 `null`; currencies are never converted or combined. Partner personal accounts
 are excluded, while enabled shared joint accounts follow Sloth's existing
 visibility rules.
 
+Goal-savings changes are previews unless `--apply` is present. Only
+caller-owned connected accounts can be changed; partner-owned shared accounts
+and fixed manual accounts return an explanatory error.
+
+```bash
+sloth-agent accounts update \
+  --account-ref sloth_account_v1_... \
+  --goal-savings-source true
+
+sloth-agent accounts update \
+  --account-ref sloth_account_v1_... \
+  --goal-savings-source true \
+  --apply
+```
+
+Read linked investment accounts and their cached holdings:
+
+```bash
+sloth-agent investments
+sloth-agent investments --account-ref sloth_account_v1_...
+```
+
+Investment reads are cache-only and do not refresh a brokerage. Holding
+quantities, unit prices, market values, currencies, and freshness are returned
+in provider-native terms. They are not converted or guaranteed to reconcile
+to an account total reported in another currency. Caller-owned personal and
+joint linked investment accounts are included; partner-owned accounts, manual
+holdings, and investment activities are not.
+
 List your goals:
 
 ```bash

package/dist/args.js

@@ -226,6 +226,79 @@ function requiredOption(values, option, commandLabel) {
         throw new UsageError(`${commandLabel} requires ${option} <value>`);
     return value;
 }
+function parseAccountRef(value) {
+    if (!/^sloth_account_v1_[A-Za-z0-9_-]{43}$/.test(value)) {
+        throw new UsageError('--account-ref must be a valid accountRef from sloth-agent accounts');
+    }
+    return value;
+}
+function parseAccounts(args, baseUrl) {
+    const subcommand = args.shift();
+    if (subcommand === undefined || subcommand === 'list') {
+        if (args.length > 0)
+            throw new UsageError(`Unknown accounts option: ${args[0]}`);
+        return withBaseUrl({ command: 'accounts' }, baseUrl);
+    }
+    if (subcommand === 'update') {
+        const { values, apply } = parseNamedOptions(args, 'accounts update', new Set(['--account-ref', '--goal-savings-source']));
+        const source = requiredOption(values, '--goal-savings-source', 'accounts update');
+        if (source !== 'true' && source !== 'false') {
+            throw new UsageError('--goal-savings-source must be true or false');
+        }
+        return withBaseUrl({
+            command: 'accounts-update',
+            accountRef: parseAccountRef(requiredOption(values, '--account-ref', 'accounts update')),
+            isGoalSavingsSource: source === 'true',
+            apply,
+        }, baseUrl);
+    }
+    if (subcommand.startsWith('-')) {
+        throw new UsageError(`Unknown accounts option: ${subcommand}`);
+    }
+    throw new UsageError(`Unknown accounts command: ${subcommand}`);
+}
+function parseInvestments(args, baseUrl) {
+    let accountRef;
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (argument === '--account-ref') {
+            accountRef = setOnce(accountRef, parseAccountRef(readOptionValue(args, index, '--account-ref')), '--account-ref');
+            index += 1;
+        }
+        else if (argument.startsWith('--account-ref=')) {
+            accountRef = setOnce(accountRef, parseAccountRef(requireNonEmpty(argument.slice('--account-ref='.length), '--account-ref')), '--account-ref');
+        }
+        else {
+            throw new UsageError(`Unknown investments option: ${argument}`);
+        }
+    }
+    return withBaseUrl({ command: 'investments', ...(accountRef ? { accountRef } : {}) }, baseUrl);
+}
+function parseBudget(args, baseUrl) {
+    const update = args[0] === 'update';
+    if (update)
+        args.shift();
+    const { values, apply } = parseNamedOptions(args, update ? 'budget update' : 'budget', new Set(update ? ['--scope', '--period', '--input'] : ['--scope', '--period']));
+    if (!update && apply)
+        throw new UsageError('Unknown budget option: --apply');
+    const scope = requiredOption(values, '--scope', update ? 'budget update' : 'budget');
+    if (scope !== 'personal' && scope !== 'joint') {
+        throw new UsageError('--scope must be personal or joint');
+    }
+    const period = values.get('--period');
+    const common = {
+        scope: scope,
+        ...(period === undefined ? {} : { periodKey: parseGoalMonthKey(period, '--period') }),
+    };
+    if (!update)
+        return withBaseUrl({ command: 'budget', ...common }, baseUrl);
+    return withBaseUrl({
+        command: 'budget-update',
+        ...common,
+        input: requiredOption(values, '--input', 'budget update'),
+        apply,
+    }, baseUrl);
+}
 function parseCategories(args, baseUrl) {
     const subcommand = args.shift();
     if (subcommand === undefined || subcommand === 'list') {
@@ -551,12 +624,19 @@ function helpTopic(argv) {
             return 'line-items-rename';
         return undefined;
     }
+    if (command === 'budget') {
+        return subcommand === 'update' ? 'budget-update' : 'budget';
+    }
     if (command === 'accounts'
         || command === 'transactions'
         || command === 'assign'
         || command === 'ask-partner') {
+        if (command === 'accounts' && subcommand === 'update')
+            return 'accounts-update';
         return command;
     }
+    if (command === 'investments')
+        return 'investments';
     return undefined;
 }
 export function parseArgs(argv) {
@@ -583,10 +663,13 @@ export function parseArgs(argv) {
         return parseLineItems(args, baseUrl);
     }
     if (command === 'accounts') {
-        if (args.length > 0) {
-            throw new UsageError(`Unknown accounts option: ${args[0]}`);
-        }
-        return withBaseUrl({ command }, baseUrl);
+        return parseAccounts(args, baseUrl);
+    }
+    if (command === 'investments') {
+        return parseInvestments(args, baseUrl);
+    }
+    if (command === 'budget') {
+        return parseBudget(args, baseUrl);
     }
     if (command === 'transactions') {
         return withBaseUrl({ command, filters: parseTransactions(args) }, baseUrl);

package/dist/cli.js

@@ -1,10 +1,10 @@
 import fs from 'node:fs';
 import { parseArgs, resolveBaseUrl, } from './args.js';
 import { ICON_KEYS } from './category-metadata.js';
-import { parseApiResponse, validateAssignmentPayload, } from './contracts.js';
+import { parseApiResponse, validateAssignmentPayload, validateBudgetUpdatePayload, } from './contracts.js';
 import { createSystemCredentialStore, secureStorageUnavailableError, } from './credential-store.js';
 import { ApiError, CliError, ConfigError, UsageError, } from './errors.js';
-export const CLI_VERSION = '0.5.0';
+export const CLI_VERSION = '0.7.0';
 const REQUEST_TIMEOUT_MS = 60_000;
 const API_ORIGIN_HELP_LINES = [
     '',
@@ -25,7 +25,12 @@ export function usageText() {
         '  sloth-agent auth login [--token-stdin | --from-env] [--base-url URL]',
         '  sloth-agent auth status [--base-url URL]',
         '  sloth-agent auth logout [--base-url URL]',
-        '  sloth-agent accounts [--base-url URL]',
+        '  sloth-agent accounts [list] [--base-url URL]',
+        '  sloth-agent accounts update --account-ref REF --goal-savings-source true|false [--apply]',
+        '  sloth-agent investments [--account-ref REF] [--base-url URL]',
+        '  sloth-agent budget --scope personal|joint [--period YYYY-MM] [--base-url URL]',
+        '  sloth-agent budget update --scope personal|joint [--period YYYY-MM]',
+        '    --input budget.json [--apply] [--base-url URL]',
         '  sloth-agent categories [list] [--base-url URL]',
         '  sloth-agent categories create --name NAME --icon-key KEY --type TYPE [--apply]',
         '  sloth-agent categories rename --category-id ID --name NAME [--apply]',
@@ -280,7 +285,7 @@ export function accountsHelpText() {
         'Read the existing Sloth account inventory known to the authenticated user.',
         '',
         'Usage:',
-        '  sloth-agent accounts [--base-url URL]',
+        '  sloth-agent accounts [list] [--base-url URL]',
         '',
         'Options:',
         '  --base-url URL   Optional. Override the API origin.',
@@ -296,6 +301,121 @@ export function accountsHelpText() {
         '  accounts[].ownership   personal or joint',
         '  accounts[].balanceAmount and currency in the native currency when known',
         '  accounts[].connectionState and lastBalanceUpdatedAt for freshness',
+        '  accounts[].isGoalSavingsSource whether the owner uses it for goal savings',
+    ].join('\n');
+}
+export function accountsUpdateHelpText() {
+    return [
+        'Sloth Agent CLI — accounts update',
+        '',
+        'Preview or update whether an owned connected account is used for goal savings.',
+        '',
+        'Usage:',
+        '  sloth-agent accounts update --account-ref REF --goal-savings-source true|false [--apply] [--base-url URL]',
+        '',
+        'Required inputs:',
+        '  --account-ref REF                  Opaque accountRef from sloth-agent accounts.',
+        '  --goal-savings-source true|false   Enable or disable goal-savings membership.',
+        '',
+        'Write behavior:',
+        '  Without --apply, returns a JSON preview without credentials or a network request.',
+        '  With --apply, requires agent:write on a write-enabled token and updates saved Sloth metadata.',
+        '  Partner-owned shared accounts and manual accounts cannot be changed.',
+        '  Unknown, disconnected, or inaccessible references return Account not found.',
+        ...API_ORIGIN_HELP_LINES,
+        '',
+        'Output:',
+        '  Preview mode returns dryRun, method, endpoint, and payload.',
+        '  Apply mode returns changed and the complete persisted account.',
+    ].join('\n');
+}
+export function investmentsHelpText() {
+    return [
+        'Sloth Agent CLI — investments',
+        '',
+        'Read linked investment accounts and their cached provider-native holdings.',
+        '',
+        'Usage:',
+        '  sloth-agent investments [--account-ref REF] [--base-url URL]',
+        '',
+        'Options:',
+        '  --account-ref REF  Optional. Return one linked investment account.',
+        '  --base-url URL     Optional. Override the API origin.',
+        '  -h, --help         Show this help.',
+        ...API_ORIGIN_HELP_LINES,
+        '',
+        'Access:',
+        '  This command requires agent:read and is read-only and cache-only; it never refreshes a brokerage.',
+        '  An unknown or non-investment filter returns Investment account not found.',
+        '',
+        'Output:',
+        '  investmentAccounts contains account totals and nested holdings.',
+        '  Holding quantities, prices, market values, currencies, and freshness are',
+        '  provider-native and are not converted or guaranteed to reconcile to totals.',
+    ].join('\n');
+}
+export function budgetHelpText() {
+    return [
+        'Sloth Agent CLI — budget',
+        '',
+        'Read one personal or joint budget period.',
+        '',
+        'Usage:',
+        '  sloth-agent budget --scope personal|joint [--period YYYY-MM] [--base-url URL]',
+        '',
+        'Options:',
+        '  --scope personal|joint  Required. Budget ownership scope.',
+        '  --period YYYY-MM        Optional. Defaults to the current Sloth budget period.',
+        '  --base-url URL          Optional. Override the API origin.',
+        '  -h, --help              Show this help.',
+        ...API_ORIGIN_HELP_LINES,
+        '',
+        'Access:',
+        '  This command is read-only and requires agent:read.',
+        '',
+        'Output:',
+        '  JSON containing scope, periodKey, periodStatus, currency, and effectiveFromPeriodKey.',
+        '  funding contains current stored to-assign and reserve amounts when that period exists.',
+        '  categories[].lineItems contains line-item IDs, names, and planned amounts in pence.',
+        '  Categories also include plannedPence and assignedPence.',
+    ].join('\n');
+}
+export function budgetUpdateHelpText() {
+    return [
+        'Sloth Agent CLI — budget update',
+        '',
+        'Preview or update planned line-item amounts for one budget scope.',
+        '',
+        'Usage:',
+        '  sloth-agent budget update --scope personal|joint [--period YYYY-MM] --input FILE [--apply] [--base-url URL]',
+        '',
+        'Required inputs:',
+        '  --scope personal|joint  Budget ownership scope.',
+        '  --input FILE            JSON file containing allocations.',
+        '',
+        'Optional inputs:',
+        '  --period YYYY-MM        Defaults to the current Sloth budget period.',
+        '  --apply                 Send the update. Without it, only validate and preview.',
+        '  --base-url URL          Override the API origin.',
+        '  -h, --help              Show this help.',
+        ...API_ORIGIN_HELP_LINES,
+        '',
+        'Input format:',
+        '  {"allocations":[{"categoryId":"groceries","lineItemId":"weekly","plannedPence":45000}]}',
+        '  Provide 1 to 100 unique categoryId and lineItemId pairs.',
+        '  plannedPence must be a nonnegative whole number of pence.',
+        '',
+        'Write behavior:',
+        '  Without --apply, returns JSON after local validation and does not load credentials',
+        '  or contact Sloth Money. A successful preview does not guarantee the remote write.',
+        '  With --apply, each supplied amount patches a complete selected-period budget.',
+        '  The resulting complete budget overwrites the selected period and every explicit future plan.',
+        '  A later update from another period overwrites that period and everything after it.',
+        '  Historical periods cannot be changed. Applying requires agent:write.',
+        '',
+        'Output:',
+        '  Preview mode returns dryRun, endpoint, method, and the validated payload.',
+        '  Apply mode returns the complete persisted budget response.',
     ].join('\n');
 }
 export function transactionsHelpText() {
@@ -581,6 +701,10 @@ export function commandHelpText(topic) {
         'auth-status': authStatusHelpText,
         'auth-logout': authLogoutHelpText,
         accounts: accountsHelpText,
+        'accounts-update': accountsUpdateHelpText,
+        investments: investmentsHelpText,
+        budget: budgetHelpText,
+        'budget-update': budgetUpdateHelpText,
         categories: categoriesHelpText,
         'categories-create': categoriesCreateHelpText,
         'categories-rename': categoriesRenameHelpText,
@@ -666,6 +790,15 @@ function readAssignmentFile(filePath) {
         throw new UsageError(`Failed to read assignment JSON: ${message}`);
     }
 }
+function readBudgetFile(filePath) {
+    try {
+        return JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new UsageError(`Failed to read budget JSON: ${message}`);
+    }
+}
 function buildTransactionsQuery(filters) {
     const params = new URLSearchParams();
     if (filters.uncategorized !== undefined) {
@@ -833,9 +966,64 @@ export async function runCli(argv = process.argv.slice(2), options = {}) {
             });
             return 0;
         }
+        if (parsed.command === 'accounts-update' && !parsed.apply) {
+            const endpoint = `${baseUrl}/api/agent/v1/accounts/${encodeURIComponent(parsed.accountRef)}`;
+            writeJson(writeStdout, {
+                dryRun: true,
+                endpoint,
+                method: 'PATCH',
+                payload: { isGoalSavingsSource: parsed.isGoalSavingsSource },
+            });
+            return 0;
+        }
+        const budgetUpdatePayload = parsed.command === 'budget-update'
+            ? validateBudgetUpdatePayload(readBudgetFile(parsed.input))
+            : undefined;
+        if (parsed.command === 'budget-update' && !parsed.apply) {
+            writeJson(writeStdout, {
+                dryRun: true,
+                endpoint: `${baseUrl}/api/agent/v1/budgets`,
+                method: 'PATCH',
+                payload: {
+                    scope: parsed.scope,
+                    ...(parsed.periodKey === undefined ? {} : { periodKey: parsed.periodKey }),
+                    ...budgetUpdatePayload,
+                },
+            });
+            return 0;
+        }
         const credential = await resolveCredential(environment, baseUrl, getCredentialStore);
         token = credential.token;
         const headers = requestHeaders(token);
+        if (parsed.command === 'accounts-update') {
+            const endpoint = `${baseUrl}/api/agent/v1/accounts/${encodeURIComponent(parsed.accountRef)}`;
+            const payload = { isGoalSavingsSource: parsed.isGoalSavingsSource };
+            const response = await fetchImplementation(endpoint, {
+                method: 'PATCH',
+                headers: { ...headers, 'Content-Type': 'application/json' },
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            const data = parseApiResponse(parsed.command, await parseHttpResponse(response, token));
+            writeJson(writeStdout, data);
+            return 0;
+        }
+        if (parsed.command === 'budget-update') {
+            const payload = {
+                scope: parsed.scope,
+                ...(parsed.periodKey === undefined ? {} : { periodKey: parsed.periodKey }),
+                ...budgetUpdatePayload,
+            };
+            const response = await fetchImplementation(`${baseUrl}/api/agent/v1/budgets`, {
+                method: 'PATCH',
+                headers: { ...headers, 'Content-Type': 'application/json' },
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            const data = parseApiResponse(parsed.command, await parseHttpResponse(response, token));
+            writeJson(writeStdout, data);
+            return 0;
+        }
         if (parsed.command === 'categories-create'
             || parsed.command === 'categories-rename'
             || parsed.command === 'line-items-create'
@@ -1002,14 +1190,31 @@ export async function runCli(argv = process.argv.slice(2), options = {}) {
             writeJson(writeStdout, data);
             return 0;
         }
+        if (parsed.command === 'budget') {
+            const query = new URLSearchParams({ scope: parsed.scope });
+            if (parsed.periodKey !== undefined)
+                query.set('periodKey', parsed.periodKey);
+            const response = await fetchImplementation(`${baseUrl}/api/agent/v1/budgets?${query.toString()}`, {
+                method: 'GET',
+                headers,
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            const data = parseApiResponse('budget', await parseHttpResponse(response, token));
+            writeJson(writeStdout, data);
+            return 0;
+        }
         const path = parsed.command === 'accounts'
             ? '/api/agent/v1/accounts'
-            : parsed.command === 'categories'
-                ? '/api/agent/v1/categories'
-                : `/api/agent/v1/transactions${(() => {
-                    const query = buildTransactionsQuery(parsed.filters);
-                    return query ? `?${query}` : '';
-                })()}`;
+            : parsed.command === 'investments'
+                ? `/api/agent/v1/investments${parsed.accountRef
+                    ? `?${new URLSearchParams({ accountRef: parsed.accountRef }).toString()}`
+                    : ''}`
+                : parsed.command === 'categories'
+                    ? '/api/agent/v1/categories'
+                    : `/api/agent/v1/transactions${(() => {
+                        const query = buildTransactionsQuery(parsed.filters);
+                        return query ? `?${query}` : '';
+                    })()}`;
         const response = await fetchImplementation(`${baseUrl}${path}`, {
             method: 'GET',
             headers: parsed.command === 'transactions'

package/dist/contracts.js

@@ -109,6 +109,36 @@ export function validateAssignmentPayload(value) {
     }
     return { assignments: payload.assignments.map(validateAssignment) };
 }
+export function validateBudgetUpdatePayload(value) {
+    const payload = requireObject(value, 'budget update payload');
+    rejectUnknownFields(payload, new Set(['allocations']), 'budget update payload');
+    if (!Array.isArray(payload.allocations)) {
+        throw new UsageError('allocations array is required');
+    }
+    if (payload.allocations.length < 1 || payload.allocations.length > 100) {
+        throw new UsageError('allocations must contain between 1 and 100 items');
+    }
+    const seen = new Set();
+    const allocations = payload.allocations.map((value, index) => {
+        const label = `allocations[${index}]`;
+        const allocation = requireObject(value, label);
+        rejectUnknownFields(allocation, new Set(['categoryId', 'lineItemId', 'plannedPence']), label);
+        const categoryId = requireString(allocation.categoryId, `${label}.categoryId`);
+        const lineItemId = requireString(allocation.lineItemId, `${label}.lineItemId`);
+        if (typeof allocation.plannedPence !== 'number'
+            || !Number.isSafeInteger(allocation.plannedPence)
+            || allocation.plannedPence < 0) {
+            throw new UsageError(`${label}.plannedPence must be a nonnegative safe integer`);
+        }
+        const key = `${categoryId}\u0000${lineItemId}`;
+        if (seen.has(key)) {
+            throw new UsageError(`${label} duplicates a categoryId and lineItemId pair`);
+        }
+        seen.add(key);
+        return { categoryId, lineItemId, plannedPence: allocation.plannedPence };
+    });
+    return { allocations };
+}
 function isLineItemMap(value) {
     if (!isObject(value))
         return false;
@@ -285,6 +315,61 @@ function isGoal(value) {
 function isCurrency(value) {
     return typeof value === 'string' && /^[A-Z]{3}$/.test(value);
 }
+function isNonnegativeSafeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+}
+function isSafeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value);
+}
+function isBudgetLineItem(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, ['id', 'name', 'plannedPence'])
+        && typeof value.id === 'string'
+        && value.id.trim().length > 0
+        && typeof value.name === 'string'
+        && value.name.trim().length > 0
+        && isNonnegativeSafeInteger(value.plannedPence));
+}
+function isBudgetCategory(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, ['id', 'name', 'plannedPence', 'assignedPence', 'lineItems'])
+        && typeof value.id === 'string'
+        && value.id.trim().length > 0
+        && typeof value.name === 'string'
+        && value.name.trim().length > 0
+        && isNonnegativeSafeInteger(value.plannedPence)
+        && (value.assignedPence === null || isSafeInteger(value.assignedPence))
+        && Array.isArray(value.lineItems)
+        && value.lineItems.every(isBudgetLineItem));
+}
+function isBudgetResponse(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, [
+            'scope',
+            'periodKey',
+            'periodStatus',
+            'currency',
+            'effectiveFromPeriodKey',
+            'funding',
+            'categories',
+        ])
+        && (value.scope === 'personal' || value.scope === 'joint')
+        && typeof value.periodKey === 'string'
+        && /^\d{4}-(0[1-9]|1[0-2])$/.test(value.periodKey)
+        && (value.periodStatus === 'historical'
+            || value.periodStatus === 'current'
+            || value.periodStatus === 'future')
+        && isCurrency(value.currency)
+        && typeof value.effectiveFromPeriodKey === 'string'
+        && /^\d{4}-(0[1-9]|1[0-2])$/.test(value.effectiveFromPeriodKey)
+        && (value.funding === null
+            || (isObject(value.funding)
+                && hasOnlyFields(value.funding, ['toAssignPence', 'nextPeriodReservePence'])
+                && isSafeInteger(value.funding.toAssignPence)
+                && isSafeInteger(value.funding.nextPeriodReservePence)))
+        && Array.isArray(value.categories)
+        && value.categories.every(isBudgetCategory));
+}
 function isNullableNonEmptyString(value) {
     return value === null || (typeof value === 'string'
         && value.length > 0
@@ -303,6 +388,7 @@ function isAccount(value) {
             'source',
             'lastBalanceUpdatedAt',
             'connectionState',
+            'isGoalSavingsSource',
         ])
         && typeof value.accountRef === 'string'
         && /^sloth_account_v1_[A-Za-z0-9_-]{43}$/.test(value.accountRef)
@@ -321,7 +407,8 @@ function isAccount(value) {
         && (value.connectionState === 'active'
             || value.connectionState === 'expired'
             || value.connectionState === 'manual'
-            || value.connectionState === 'unknown'));
+            || value.connectionState === 'unknown')
+        && typeof value.isGoalSavingsSource === 'boolean');
 }
 function isAccountsResponse(value) {
     return (isObject(value)
@@ -330,6 +417,56 @@ function isAccountsResponse(value) {
         && Array.isArray(value.accounts)
         && value.accounts.every(isAccount));
 }
+function isAccountMutationResponse(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, ['changed', 'account'])
+        && typeof value.changed === 'boolean'
+        && isAccount(value.account));
+}
+function isInvestmentHolding(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, [
+            'instrumentType',
+            'symbol',
+            'name',
+            'units',
+            'unitPriceAmount',
+            'marketValueAmount',
+            'currency',
+            'providerFreshnessAsOf',
+            'syncedAt',
+        ])
+        && typeof value.instrumentType === 'string'
+        && value.instrumentType.trim().length > 0
+        && (value.symbol === null || (typeof value.symbol === 'string' && value.symbol.trim().length > 0))
+        && typeof value.name === 'string'
+        && value.name.trim().length > 0
+        && typeof value.units === 'number'
+        && Number.isFinite(value.units)
+        && typeof value.unitPriceAmount === 'number'
+        && Number.isFinite(value.unitPriceAmount)
+        && typeof value.marketValueAmount === 'number'
+        && Number.isFinite(value.marketValueAmount)
+        && isCurrency(value.currency)
+        && (value.providerFreshnessAsOf === null || isIsoDateTime(value.providerFreshnessAsOf))
+        && isIsoDateTime(value.syncedAt));
+}
+function isInvestmentsResponse(value) {
+    return (isObject(value)
+        && hasOnlyFields(value, ['asOf', 'investmentAccounts'])
+        && isIsoDateTime(value.asOf)
+        && Array.isArray(value.investmentAccounts)
+        && value.investmentAccounts.every((account) => {
+            if (!isObject(account))
+                return false;
+            const { holdings, ...baseAccount } = account;
+            return (isAccount(baseAccount)
+                && account.accountType === 'investments'
+                && account.source === 'connected'
+                && Array.isArray(holdings)
+                && holdings.every(isInvestmentHolding));
+        }));
+}
 function isGoalsResponse(value) {
     return (isObject(value)
         && hasOnlyFields(value, ['currency', 'goals'])
@@ -353,23 +490,29 @@ function isGoalDeleteResponse(value) {
 export function parseApiResponse(command, value) {
     const valid = command === 'accounts'
         ? isAccountsResponse(value)
-        : command === 'categories'
-            ? isCategoryResponse(value)
-            : command === 'categories-create' || command === 'categories-rename'
-                ? isCategoryMutationResponse(value)
-                : command === 'line-items-create' || command === 'line-items-rename'
-                    ? isLineItemMutationResponse(value)
-                    : command === 'transactions'
-                        ? isTransactionsResponse(value)
-                        : command === 'assign'
-                            ? isAssignmentResponse(value)
-                            : command === 'ask-partner'
-                                ? isPartnerResponse(value)
-                                : command === 'goals-list'
-                                    ? isGoalsResponse(value)
-                                    : command === 'goals-delete'
-                                        ? isGoalDeleteResponse(value)
-                                        : isGoalMutationResponse(value);
+        : command === 'accounts-update'
+            ? isAccountMutationResponse(value)
+            : command === 'investments'
+                ? isInvestmentsResponse(value)
+                : command === 'budget' || command === 'budget-update'
+                    ? isBudgetResponse(value)
+                    : command === 'categories'
+                        ? isCategoryResponse(value)
+                        : command === 'categories-create' || command === 'categories-rename'
+                            ? isCategoryMutationResponse(value)
+                            : command === 'line-items-create' || command === 'line-items-rename'
+                                ? isLineItemMutationResponse(value)
+                                : command === 'transactions'
+                                    ? isTransactionsResponse(value)
+                                    : command === 'assign'
+                                        ? isAssignmentResponse(value)
+                                        : command === 'ask-partner'
+                                            ? isPartnerResponse(value)
+                                            : command === 'goals-list'
+                                                ? isGoalsResponse(value)
+                                                : command === 'goals-delete'
+                                                    ? isGoalDeleteResponse(value)
+                                                    : isGoalMutationResponse(value);
     if (!valid) {
         const label = command === 'assign' ? 'assignment' : command;
         throw new ApiError(`Invalid ${label} response from the Agent API`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slothmoney/agent-cli",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Command-line access to the Sloth Money Agent API.",
   "type": "module",
   "bin": {