@trading-boy/cli 1.6.1 → 1.8.0

package/dist/commands/agent-cmd.js

@@ -12,45 +12,9 @@ import { resolve } from 'node:path';
 import { Option } from 'commander';
 import chalk from 'chalk';
 import { createLogger } from '@trading-boy/core';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
-import { padRight } from '../utils.js';
+import { apiRequest } from '../api-client.js';
+import { padRight, handleApiError, ensureRemote } from '../utils.js';
 const logger = createLogger('cli-agent');
-// ─── Error Handler ───
-function handleApiError(error, context) {
-    if (error instanceof ApiError) {
-        switch (error.status) {
-            case 401:
-                console.error(chalk.red('Error: API key invalid or expired. Run `trading-boy login` to re-authenticate.'));
-                break;
-            case 403:
-                console.error(chalk.red(`Error: ${error.message}`));
-                break;
-            case 404:
-                console.error(chalk.red(`Error: Not found — ${error.message}`));
-                break;
-            case 429:
-                console.error(chalk.red(`Error: Limit reached — ${error.message}`));
-                break;
-            default:
-                console.error(chalk.red(`Error: ${error.message}`));
-        }
-    }
-    else {
-        const message = error instanceof Error ? error.message : String(error);
-        logger.error({ error: message }, context);
-        console.error(chalk.red(`Error: ${message}`));
-    }
-    process.exitCode = error instanceof ApiError ? 2 : 1;
-}
-async function ensureRemote() {
-    if (!(await isRemoteMode())) {
-        console.error(chalk.yellow('Agent commands require a remote API connection.'));
-        console.error(chalk.dim('  Run: trading-boy login'));
-        process.exitCode = 1;
-        return false;
-    }
-    return true;
-}
 // ─── Formatters ───
 function formatShortDate(isoString) {
     if (!isoString)
@@ -133,6 +97,7 @@ export function registerAgentCommand(program) {
         .option('--purpose-override <text>', 'Custom purpose/mission for this agent')
         .option('--soul-file <path>', 'Load soul from a file')
         .option('--purpose-file <path>', 'Load purpose from a file')
+        .option('--exit-reasoner', 'Enable LLM-powered exit reasoning for this agent')
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (options) => {
         if (!(await ensureRemote()))
@@ -193,6 +158,8 @@ export function registerAgentCommand(program) {
             body.decideModel = options.decideModel;
         if (options.assetClass)
             body.assetClass = options.assetClass;
+        if (options.exitReasoner)
+            body.exitReasoner = true;
         // Soul override — file takes precedence over inline text
         if (options.soulFile) {
             const path = resolve(options.soulFile);
@@ -241,7 +208,7 @@ export function registerAgentCommand(program) {
             }
         }
         catch (error) {
-            handleApiError(error, 'Agent create failed');
+            handleApiError(error, 'Agent create failed', logger);
         }
     });
     // ── list ────────────────────────────────────────────────────────────────────
@@ -295,7 +262,7 @@ export function registerAgentCommand(program) {
             console.log('');
         }
         catch (error) {
-            handleApiError(error, 'Agent list failed');
+            handleApiError(error, 'Agent list failed', logger);
         }
     });
     // ── show ────────────────────────────────────────────────────────────────────
@@ -375,58 +342,76 @@ export function registerAgentCommand(program) {
             console.log('');
         }
         catch (error) {
-            handleApiError(error, 'Agent show failed');
+            handleApiError(error, 'Agent show failed', logger);
         }
     });
     // ── pause ───────────────────────────────────────────────────────────────────
     agent
         .command('pause <agentId>')
         .description('Pause an agent')
-        .action(async (agentId) => {
+        .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
+        .action(async (agentId, options) => {
         if (!(await ensureRemote()))
             return;
         try {
             await apiRequest(`/api/v1/agents/${encodeURIComponent(agentId)}/pause`, {
                 method: 'POST',
             });
-            console.log(chalk.green(`  Agent ${agentId} paused`));
+            if (options.format === 'json') {
+                console.log(JSON.stringify({ agentId, status: 'paused' }, null, 2));
+            }
+            else {
+                console.log(chalk.green(`  Agent ${agentId} paused`));
+            }
         }
         catch (error) {
-            handleApiError(error, 'Agent pause failed');
+            handleApiError(error, 'Agent pause failed', logger);
         }
     });
     // ── resume ──────────────────────────────────────────────────────────────────
     agent
         .command('resume <agentId>')
         .description('Resume a paused agent')
-        .action(async (agentId) => {
+        .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
+        .action(async (agentId, options) => {
         if (!(await ensureRemote()))
             return;
         try {
             await apiRequest(`/api/v1/agents/${encodeURIComponent(agentId)}/resume`, {
                 method: 'POST',
             });
-            console.log(chalk.green(`  Agent ${agentId} resumed`));
+            if (options.format === 'json') {
+                console.log(JSON.stringify({ agentId, status: 'active' }, null, 2));
+            }
+            else {
+                console.log(chalk.green(`  Agent ${agentId} resumed`));
+            }
         }
         catch (error) {
-            handleApiError(error, 'Agent resume failed');
+            handleApiError(error, 'Agent resume failed', logger);
         }
     });
     // ── delete ──────────────────────────────────────────────────────────────────
     agent
         .command('delete <agentId>')
         .description('Delete an agent')
-        .action(async (agentId) => {
+        .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
+        .action(async (agentId, options) => {
         if (!(await ensureRemote()))
             return;
         try {
             await apiRequest(`/api/v1/agents/${encodeURIComponent(agentId)}`, {
                 method: 'DELETE',
             });
-            console.log(chalk.green(`  Agent ${agentId} deleted`));
+            if (options.format === 'json') {
+                console.log(JSON.stringify({ agentId, status: 'deleted' }, null, 2));
+            }
+            else {
+                console.log(chalk.green(`  Agent ${agentId} deleted`));
+            }
         }
         catch (error) {
-            handleApiError(error, 'Agent delete failed');
+            handleApiError(error, 'Agent delete failed', logger);
         }
     });
     // ── exit ───────────────────────────────────────────────────────────────────
@@ -464,7 +449,7 @@ export function registerAgentCommand(program) {
             }
         }
         catch (error) {
-            handleApiError(error, 'Position exit failed');
+            handleApiError(error, 'Position exit failed', logger);
         }
     });
     // ── update ──────────────────────────────────────────────────────────────────
@@ -488,12 +473,16 @@ export function registerAgentCommand(program) {
         .option('--purpose-override <text>', 'Custom purpose/mission for this agent')
         .option('--soul-file <path>', 'Load soul from a file')
         .option('--purpose-file <path>', 'Load purpose from a file')
+        .option('--exit-reasoner', 'Enable LLM-powered exit reasoning for this agent')
+        .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (agentId, options) => {
         if (!(await ensureRemote()))
             return;
         const body = {};
         if (options.name)
             body.name = options.name;
+        if (options.exitReasoner)
+            body.exitReasoner = true;
         if (options.autonomy)
             body.autonomyLevel = options.autonomy;
         // Resolve scan interval: --scan-interval-human takes precedence
@@ -564,14 +553,19 @@ export function registerAgentCommand(program) {
             return;
         }
         try {
-            await apiRequest(`/api/v1/agents/${encodeURIComponent(agentId)}`, {
+            const result = await apiRequest(`/api/v1/agents/${encodeURIComponent(agentId)}`, {
                 method: 'PATCH',
                 body,
             });
-            console.log(chalk.green(`  Agent ${agentId} updated`));
+            if (options.format === 'json') {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log(chalk.green(`  Agent ${agentId} updated`));
+            }
         }
         catch (error) {
-            handleApiError(error, 'Agent update failed');
+            handleApiError(error, 'Agent update failed', logger);
         }
     });
 }

package/dist/commands/benchmark-cmd.js

@@ -8,7 +8,8 @@
 // trading-boy benchmark recompute           # Trigger recompute
 import { Option } from 'commander';
 import chalk from 'chalk';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { apiRequest, ApiError } from '../api-client.js';
+import { ensureRemote } from '../utils.js';
 // ─── Formatters ───
 function formatMetric(value, decimals = 2) {
     if (value === null)
@@ -118,11 +119,8 @@ export function registerBenchmarkCommand(program) {
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (options) => {
         try {
-            if (!(await isRemoteMode())) {
-                console.error(chalk.red('Error: benchmark command requires remote mode. Run `trading-boy login` first.'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             if (options.entity) {
                 // Single entity
                 const query = new URLSearchParams();
@@ -175,11 +173,8 @@ export function registerBenchmarkCommand(program) {
         .description('Trigger on-demand benchmark recompute')
         .action(async () => {
         try {
-            if (!(await isRemoteMode())) {
-                console.error(chalk.red('Error: benchmark recompute requires remote mode. Run `trading-boy login` first.'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             console.log(chalk.dim('Recomputing benchmarks...'));
             const data = await apiRequest('/api/v1/benchmark/recompute', { method: 'POST', body: {} });
             console.log(chalk.green(`\n  ${data.message}`));

package/dist/commands/billing.js

@@ -4,6 +4,11 @@ import { createLogger } from '@trading-boy/core';
 import { apiRequest, ApiError } from '../api-client.js';
 import { padRight } from '../utils.js';
 const logger = createLogger('cli-billing');
+// ─── Security ───
+const ALLOWED_PORTAL_DOMAINS = new Set([
+    'billing.stripe.com',
+    'checkout.stripe.com',
+]);
 // ─── Formatters ───
 function formatStatusLabel(status) {
     switch (status) {
@@ -75,11 +80,14 @@ export function registerBillingCommand(program) {
                 method: 'POST',
             });
             spinner.succeed('  Opening billing portal...');
-            // Validate URL before opening browser (F1: prevent phishing via MITM)
+            // Validate URL before opening browser (prevent phishing via MITM)
             const portalUrl = new URL(result.url);
             if (portalUrl.protocol !== 'https:') {
                 throw new Error(`Refusing to open non-HTTPS portal URL: ${result.url}`);
             }
+            if (!ALLOWED_PORTAL_DOMAINS.has(portalUrl.hostname)) {
+                throw new Error(`Refusing to open URL with untrusted domain: ${portalUrl.hostname}`);
+            }
             const { default: open } = await import('open');
             await open(result.url);
             console.log('');
@@ -112,6 +120,18 @@ export function registerBillingCommand(program) {
             }
         }
         catch (error) {
+            if (error instanceof ApiError && error.status === 404) {
+                if (options.format === 'json') {
+                    console.log(JSON.stringify({ plan: 'starter', status: 'free' }, null, 2));
+                }
+                else {
+                    console.log('');
+                    console.log(chalk.dim('  You\'re on the free Starter plan.'));
+                    console.log(chalk.dim('  Run: trading-boy subscribe to upgrade.'));
+                    console.log('');
+                }
+                return;
+            }
             const message = error instanceof Error ? error.message : String(error);
             logger.error({ error: message }, 'Billing status failed');
             console.error(chalk.red(`  Error: ${message}`));

package/dist/commands/coaching-cmd.js

@@ -1,7 +1,8 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
 import { createLogger } from '@trading-boy/core';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { apiRequest, ApiError } from '../api-client.js';
+import { ensureRemote } from '../utils.js';
 // ─── Logger ───
 const logger = createLogger('cli-coaching');
 // ─── BYOK Error Hint ───
@@ -20,16 +21,6 @@ function isByokError(error) {
     }
     return false;
 }
-// ─── Remote Mode Guard ───
-async function requireRemote() {
-    if (!(await isRemoteMode())) {
-        console.error(chalk.yellow('Coaching requires a remote API connection.'));
-        console.error(chalk.dim('  Run: trading-boy login'));
-        process.exitCode = 1;
-        return false;
-    }
-    return true;
-}
 // ─── Formatters ───
 export function formatIntervention(response) {
     const lines = [];
@@ -80,7 +71,7 @@ export function registerCoachingCommand(program) {
         .option('--direction <dir>', 'Trade direction (LONG or SHORT)')
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (traderId, options) => {
-        if (!(await requireRemote()))
+        if (!(await ensureRemote()))
             return;
         // Build extraction object from flags
         const extraction = {
@@ -143,7 +134,7 @@ export function registerCoachingCommand(program) {
         .option('--flags <flags>', 'Active behavioral flags (comma-separated)')
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (traderId, options) => {
-        if (!(await requireRemote()))
+        if (!(await ensureRemote()))
             return;
         const body = {
             tiltScore: options.tiltScore ?? 0,
@@ -191,7 +182,7 @@ export function registerCoachingCommand(program) {
         .description('Acknowledge a coaching intervention')
         .requiredOption('--reason <reason>', 'Reason for acknowledgment')
         .action(async (traderId, options) => {
-        if (!(await requireRemote()))
+        if (!(await ensureRemote()))
             return;
         try {
             const result = await apiRequest(`/api/v1/traders/${encodeURIComponent(traderId)}/coaching/acknowledge`, { method: 'POST', body: { reason: options.reason } });
@@ -212,7 +203,7 @@ export function registerCoachingCommand(program) {
         .command('reset <traderId>')
         .description('Reset coaching session state')
         .action(async (traderId) => {
-        if (!(await requireRemote()))
+        if (!(await ensureRemote()))
             return;
         try {
             const result = await apiRequest(`/api/v1/traders/${encodeURIComponent(traderId)}/coaching/reset-session`, { method: 'POST', body: {} });

package/dist/commands/context.js

@@ -1,8 +1,8 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
 import { createLogger } from '@trading-boy/core';
-import { formatConnectionError, colorChange, colorSentiment, colorRiskScore, formatUsd } from '../utils.js';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { formatConnectionError, colorChange, colorSentiment, colorRiskScore, formatUsd, ensureRemote } from '../utils.js';
+import { apiRequest, ApiError } from '../api-client.js';
 // ─── Logger ───
 const logger = createLogger('cli-context');
 // ─── Formatters ───
@@ -325,12 +325,8 @@ export function registerContextCommand(program) {
         .action(async (symbol, options) => {
         try {
             // ─── Auth pre-flight ───
-            if (!(await isRemoteMode())) {
-                console.error(chalk.yellow('This command requires a remote API connection.'));
-                console.error(chalk.dim('  Run: trading-boy login'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             // ─── Validate range options ───
             if ((options.from && !options.to) || (!options.from && options.to)) {
                 console.error(chalk.red('Error: Both --from and --to must be provided for range queries.'));

package/dist/commands/cron-cmd.js

@@ -11,45 +11,9 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
 import { createLogger } from '@trading-boy/core';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
-import { padRight } from '../utils.js';
+import { apiRequest } from '../api-client.js';
+import { padRight, handleApiError, ensureRemote } from '../utils.js';
 const logger = createLogger('cli-cron');
-// ─── Error Handler ───
-function handleApiError(error, context) {
-    if (error instanceof ApiError) {
-        switch (error.status) {
-            case 401:
-                console.error(chalk.red('Error: API key invalid or expired. Run `trading-boy login` to re-authenticate.'));
-                break;
-            case 403:
-                console.error(chalk.red('Error: Subscription inactive. Run `trading-boy billing manage` to update your billing.'));
-                break;
-            case 404:
-                console.error(chalk.red(`Error: Not found — ${error.message}`));
-                break;
-            case 429:
-                console.error(chalk.red(`Error: Limit reached — ${error.message}`));
-                break;
-            default:
-                console.error(chalk.red(`Error: ${error.message}`));
-        }
-    }
-    else {
-        const message = error instanceof Error ? error.message : String(error);
-        logger.error({ error: message }, context);
-        console.error(chalk.red(`Error: ${message}`));
-    }
-    process.exitCode = error instanceof ApiError ? 2 : 1;
-}
-async function ensureRemote() {
-    if (!(await isRemoteMode())) {
-        console.error(chalk.yellow('Cron commands require a remote API connection.'));
-        console.error(chalk.dim('  Run: trading-boy login'));
-        process.exitCode = 1;
-        return false;
-    }
-    return true;
-}
 // ─── Formatters ───
 function formatShortDate(isoString) {
     if (!isoString)
@@ -137,7 +101,7 @@ export function registerCronCommand(program) {
             }
         }
         catch (error) {
-            handleApiError(error, 'Cron create failed');
+            handleApiError(error, 'Cron create failed', logger);
         }
     });
     // ── list ────────────────────────────────────────────────────────────────────
@@ -183,7 +147,7 @@ export function registerCronCommand(program) {
             console.log('');
         }
         catch (error) {
-            handleApiError(error, 'Cron list failed');
+            handleApiError(error, 'Cron list failed', logger);
         }
     });
     // ── show ────────────────────────────────────────────────────────────────────
@@ -217,7 +181,7 @@ export function registerCronCommand(program) {
             console.log('');
         }
         catch (error) {
-            handleApiError(error, 'Cron show failed');
+            handleApiError(error, 'Cron show failed', logger);
         }
     });
     // ── pause ───────────────────────────────────────────────────────────────────
@@ -235,7 +199,7 @@ export function registerCronCommand(program) {
             console.log(chalk.green(`  Job ${jobId} paused`));
         }
         catch (error) {
-            handleApiError(error, 'Cron pause failed');
+            handleApiError(error, 'Cron pause failed', logger);
         }
     });
     // ── resume ──────────────────────────────────────────────────────────────────
@@ -253,7 +217,7 @@ export function registerCronCommand(program) {
             console.log(chalk.green(`  Job ${jobId} resumed`));
         }
         catch (error) {
-            handleApiError(error, 'Cron resume failed');
+            handleApiError(error, 'Cron resume failed', logger);
         }
     });
     // ── delete ──────────────────────────────────────────────────────────────────
@@ -270,7 +234,7 @@ export function registerCronCommand(program) {
             console.log(chalk.green(`  Job ${jobId} deleted`));
         }
         catch (error) {
-            handleApiError(error, 'Cron delete failed');
+            handleApiError(error, 'Cron delete failed', logger);
         }
     });
     // ── run ─────────────────────────────────────────────────────────────────────
@@ -287,7 +251,7 @@ export function registerCronCommand(program) {
             console.log(chalk.green(`  Job ${jobId} execution triggered`));
         }
         catch (error) {
-            handleApiError(error, 'Cron run failed');
+            handleApiError(error, 'Cron run failed', logger);
         }
     });
     // ── history ─────────────────────────────────────────────────────────────────
@@ -334,7 +298,7 @@ export function registerCronCommand(program) {
             console.log('');
         }
         catch (error) {
-            handleApiError(error, 'Cron history failed');
+            handleApiError(error, 'Cron history failed', logger);
         }
     });
 }

package/dist/commands/edge-cmd.js

@@ -1,6 +1,7 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { apiRequest, ApiError } from '../api-client.js';
+import { ensureRemote } from '../utils.js';
 // ─── Formatters ───
 export function formatEdgeOutput(data) {
     const lines = [];
@@ -145,11 +146,8 @@ export function registerEdgeCommand(program) {
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (traderId, options) => {
         try {
-            if (!(await isRemoteMode())) {
-                console.error(chalk.red('Error: edge command requires remote mode. Run `trading-boy login` first.'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             const query = new URLSearchParams();
             if (options.token)
                 query.set('tokenSymbol', options.token.toUpperCase());

package/dist/commands/edge-guard-cmd.js

@@ -1,6 +1,7 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { apiRequest, ApiError } from '../api-client.js';
+import { ensureRemote } from '../utils.js';
 // ─── Formatters ───
 export function formatAssessmentOutput(data) {
     const lines = [];
@@ -114,11 +115,8 @@ export function registerEdgeGuardCommand(program) {
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (traderId, options) => {
         try {
-            if (!(await isRemoteMode())) {
-                console.error(chalk.red('Error: edge-guard command requires remote mode. Run `trading-boy login` first.'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             if (options.friction) {
                 const data = await apiRequest(`/api/v1/traders/${encodeURIComponent(traderId)}/edge-guard/friction`);
                 if (options.format === 'json') {
@@ -151,11 +149,8 @@ export function registerEdgeGuardCommand(program) {
         .addOption(new Option('--format <format>', 'Output format').choices(['text', 'json']).default('text'))
         .action(async (traderId, ackOptions) => {
         try {
-            if (!(await isRemoteMode())) {
-                console.error(chalk.red('Error: edge-guard command requires remote mode. Run `trading-boy login` first.'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             const data = await apiRequest(`/api/v1/traders/${encodeURIComponent(traderId)}/edge-guard/acknowledge`, { method: 'POST' });
             if (ackOptions.format === 'json') {
                 console.log(JSON.stringify(data, null, 2));

package/dist/commands/query.js

@@ -1,8 +1,8 @@
 import { Option } from 'commander';
 import chalk from 'chalk';
 import { createLogger } from '@trading-boy/core';
-import { formatConnectionError } from '../utils.js';
-import { isRemoteMode, apiRequest, ApiError } from '../api-client.js';
+import { formatConnectionError, ensureRemote } from '../utils.js';
+import { apiRequest, ApiError } from '../api-client.js';
 // ─── Logger ───
 const logger = createLogger('cli-query');
 // ─── Formatter ───
@@ -103,12 +103,8 @@ export function registerQueryCommand(program) {
         .action(async (symbol, options) => {
         try {
             // ─── Auth pre-flight ───
-            if (!(await isRemoteMode())) {
-                console.error(chalk.yellow('This command requires a remote API connection.'));
-                console.error(chalk.dim('  Run: trading-boy login'));
-                process.exitCode = 1;
+            if (!(await ensureRemote()))
                 return;
-            }
             const pkg = await apiRequest(`/api/v1/tokens/${encodeURIComponent(symbol.toUpperCase())}/context`);
             const result = contextToQueryResult(pkg);
             // Check if the token was actually found