wealthbox-cli 2.0.0__tar.gz → 2.2.0__tar.gz

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/.github/workflows/ci.yml

@@ -11,12 +11,12 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v8.1.0
         with:
           python-version: "3.12"
-      - run: pip install -e ".[dev]"
-      - run: ruff check src/ tests/
+      - run: uv sync --extra dev
+      - run: uv run ruff check src/ tests/
 
   test:
     runs-on: ubuntu-latest
@@ -24,23 +24,23 @@ jobs:
       matrix:
         python-version: ["3.11", "3.12", "3.13"]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v8.1.0
         with:
           python-version: ${{ matrix.python-version }}
-      - run: pip install -e ".[dev]"
-      - run: pytest
+      - run: uv sync --extra dev
+      - run: uv run pytest
 
   skill-ref-drift:
     needs: [lint, test]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v8.1.0
         with:
           python-version: "3.12"
-      - run: pip install -e ".[dev]"
-      - run: wbox internals regen-skill-refs
+      - run: uv sync --extra dev
+      - run: uv run wbox internals regen-skill-refs
       - run: git diff --exit-code -- src/wealthbox_tools/skills/wealthbox-crm/references/
 
   publish:
@@ -51,10 +51,9 @@ jobs:
       id-token: write
     environment: pypi
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v8.1.0
         with:
           python-version: "3.12"
-      - run: pip install build
-      - run: python -m build
+      - run: uv build
       - uses: pypa/gh-action-pypi-publish@release/v1

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/.github/workflows/docs.yml

@@ -18,14 +18,15 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
       - run: pip install mkdocs-material
       - run: cp CONTRIBUTING.md docs/contributing.md
+      - run: cp CHANGELOG.md docs/changelog.md
       - run: mkdocs build --strict
-      - uses: actions/upload-pages-artifact@v3
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: site/
 
@@ -37,4 +38,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/CHANGELOG.md

@@ -4,6 +4,64 @@ All notable changes to `wealthbox-cli` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.0] - 2026-05-13
+
+Small feature + correctness release. Disambiguates the two IDs returned by
+`wbox me`, fixes a silent truncation in `wbox users list` on large firms, and
+clears Node 20 deprecation warnings from CI ahead of GitHub's June 2026 cutoff.
+
+### Added
+- `wbox me user-id` — prints `current_user.id` (the workspace user ID accepted
+  by `--assigned-to`) as a bare integer, for composing with command
+  substitution: `wbox tasks list --assigned-to "$(wbox me user-id)"` (#90, #91).
+- `wbox me --format table` now labels the two IDs as `login_id` and
+  `user_id (--assigned-to)` so they aren't confusable at a glance. The JSON
+  shape is unchanged — no breaking change for existing scripts (#91).
+- Skill docs (`lookups.md`, `tasks.md`, `contacts.md`) flag the two-ID trap
+  inline near `--assigned-to`.
+
+### Fixed
+- `wbox users list` now paginates across all pages. Previously, firms with
+  more than 25 users silently saw a truncated list — the CLI exposes no
+  `--page` flag, so there was no manual workaround.
+- mkdocs docs deploy was failing on every main push because `docs/index.md`
+  linked to a missing `changelog.md`. `CHANGELOG.md` is now staged into
+  `docs/` at build time and listed in nav (#92).
+
+### Changed
+- CI actions bumped to Node 24 runtimes ahead of GitHub's June 2 2026 cutoff:
+  `actions/checkout` v4→v6, `astral-sh/setup-uv` v6→v8.1.0 (pinned exact —
+  setup-uv v8+ no longer publishes rolling major tags as a supply-chain
+  mitigation), `actions/setup-python` v5→v6, `actions/deploy-pages` v4→v5,
+  `actions/upload-pages-artifact` v3→v5 (#92, #93).
+
+## [2.1.0] - 2026-05-09
+
+Repository simplification release. Drops a runtime dep, retires `.env` support,
+and switches dev tooling to [uv](https://docs.astral.sh/uv/).
+
+### Breaking
+- **Removed `.env` file support.** Token resolution is now a 3-tier chain:
+  `--token` flag → `WEALTHBOX_TOKEN` env var → config file. Users relying on a
+  working-directory `.env` should migrate to `wbox config set-token` (preferred)
+  or export `WEALTHBOX_TOKEN` in their shell. The `python-dotenv` runtime
+  dependency was dropped.
+
+### Changed
+- Development tooling moved to [uv](https://docs.astral.sh/uv/). `uv sync
+  --extra dev` replaces the manual `python -m venv` + activate + `pip install
+  -e` dance, and `uv run wbox …` replaces direct `.venv/bin/wbox` invocation.
+  CI now uses `astral-sh/setup-uv@v6` and `uv build` for the publish job. Plain
+  `pip install -e ".[dev]"` continues to work — `pyproject.toml` is the source
+  of truth for both tools.
+- `scripts/run-wbox.sh` and `scripts/smoke_test.sh` invoke via `uv run` and no
+  longer source a `.env` file.
+
+### Removed
+- `.env` and `.env.example` files at the repo root.
+- `.python-version` file. `requires-python = ">=3.11"` in `pyproject.toml` is
+  the authoritative interpreter constraint; uv reads it directly.
+
 ## [2.0.0] - 2026-05-09
 
 v2 retires the Claude marketplace plugin distribution and ships `wbox` as a

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/CONTRIBUTING.md

@@ -6,38 +6,46 @@ Thank you for your interest in contributing to **wealthbox-cli**!
 
 ## Development Setup
 
+This project uses [uv](https://docs.astral.sh/uv/) for dependency management. Install it first if you don't have it:
+
 ```bash
-git clone https://github.com/massive-value/wealthbox-cli
-cd wealthbox-cli
-python -m venv .venv
+# macOS / Linux
+curl -LsSf https://astral.sh/uv/install.sh | sh
+
+# Windows (PowerShell)
+irm https://astral.sh/uv/install.ps1 | iex
 ```
 
-Activate the virtual environment:
+Then clone and sync:
 
-| Platform | Command |
-|----------|---------|
-| macOS/Linux | `source .venv/bin/activate` |
-| Windows (PowerShell) | `.venv\Scripts\Activate.ps1` |
-| Windows (Command Prompt) | `.venv\Scripts\activate.bat` |
+```bash
+git clone https://github.com/massive-value/wealthbox-cli
+cd wealthbox-cli
+uv sync --extra dev
+```
 
-Then install with dev dependencies:
+`uv sync` creates a project-local `.venv/` and installs the package in editable mode with dev dependencies. There is nothing to "activate" — prefix commands with `uv run`:
 
 ```bash
-pip install -e ".[dev]"
+uv run wbox --version
+uv run pytest
+uv run ruff check src/ tests/
 ```
 
 Configure your Wealthbox API token (optional — tests don't require a real token):
 
 ```bash
-wbox config set-token
+uv run wbox config set-token
 ```
 
+> Prefer plain `pip`? `pip install -e ".[dev]"` still works — `pyproject.toml` is the source of truth for both tools.
+
 ---
 
 ## Running Tests
 
 ```bash
-pytest
+uv run pytest
 ```
 
 Tests use [respx](https://lundberg.github.io/respx/) to mock HTTP at the transport layer — no real API calls are made.
@@ -45,7 +53,7 @@ Tests use [respx](https://lundberg.github.io/respx/) to mock HTTP at the transpo
 ## Code Style
 
 ```bash
-ruff check src/ tests/
+uv run ruff check src/ tests/
 ```
 
 - **ruff** for linting (E, F, I rules; 120-char line length)

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wealthbox-cli
-Version: 2.0.0
+Version: 2.2.0
 Summary: CLI and client library for the Wealthbox CRM API
 Project-URL: Homepage, https://github.com/massive-value/wealthbox-cli
 Project-URL: Documentation, https://massive-value.github.io/wealthbox-cli/
@@ -28,7 +28,6 @@ Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: httpx<1.0,>=0.27
 Requires-Dist: pydantic<3.0,>=2.0
-Requires-Dist: python-dotenv<2.0,>=1.0
 Requires-Dist: tabulate<1.0,>=0.9
 Requires-Dist: typer<1.0,>=0.12
 Provides-Extra: dev

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/SECURITY.md

@@ -18,7 +18,7 @@ You will receive a response within 5 business days. If the issue is confirmed, a
 
 Your Wealthbox API token grants access to your CRM data. Keep it safe:
 
-- **Never commit your token to version control.** Use `.env` (already in `.gitignore`) or `wbox config set-token` to store it securely.
+- **Never commit your token to version control.** Use `wbox config set-token` to store it securely (written to your platform config dir, not the repo).
 - **Never share your token** in issues, PRs, or chat.
 - If a token is accidentally exposed, regenerate it immediately in your Wealthbox account settings under **Settings > API Access**.
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/docs/getting-started.md

@@ -89,19 +89,13 @@ For CI, scripting, or containers:
     export WEALTHBOX_TOKEN="your_api_token_here"
     ```
 
-=== ".env file"
-
-    ```bash
-    echo 'WEALTHBOX_TOKEN=your_api_token_here' > .env
-    ```
-
 === "Per-command flag"
 
     ```bash
     wbox contacts list --token your_api_token_here
     ```
 
-Token is resolved in this order: `--token` flag → `WEALTHBOX_TOKEN` env var → config file → `.env` file.
+Token is resolved in this order: `--token` flag → `WEALTHBOX_TOKEN` env var → config file.
 
 ---
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/mkdocs.yml

@@ -59,6 +59,7 @@ nav:
   - Getting Started: getting-started.md
   - CLI Reference: cli-reference.md
   - Contributing: contributing.md
+  - Changelog: changelog.md
 
 extra:
   social:

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "wealthbox-cli"
-version = "2.0.0"
+version = "2.2.0"
 description = "CLI and client library for the Wealthbox CRM API"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -44,7 +44,6 @@ dependencies = [
     "pydantic>=2.0,<3.0",
     "httpx>=0.27,<1.0",
     "typer>=0.12,<1.0",
-    "python-dotenv>=1.0,<2.0",
     "tabulate>=0.9,<1.0",
 ]
 
@@ -77,7 +76,6 @@ exclude = [
     "resources/",
     "scripts/",
     "dev/",
-    ".python-version",
     "docs/superpowers/",
 ]
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/cli/_util.py

@@ -49,25 +49,17 @@ COMMENT_RESOURCE_TYPES: dict[str, str] = {
 
 
 def get_client(token: str | None = None) -> WealthboxClient:
-    """Create a WealthboxClient with token resolution: --token flag > env var > config file > .env."""
+    """Create a WealthboxClient with token resolution: --token flag > env var > config file."""
     import os
     if token is None:
         token = os.environ.get("WEALTHBOX_TOKEN")
     if token is None:
         from ._config import get_stored_token
         token = get_stored_token()
-    if token is None:
-        try:
-            from dotenv import load_dotenv
-            load_dotenv()
-            token = os.environ.get("WEALTHBOX_TOKEN")
-        except ImportError:
-            pass
     if not token:
         raise ValueError(
             "Wealthbox token required. Provide one via any of: "
-            "--token flag, WEALTHBOX_TOKEN env var, "
-            "`wbox config set-token`, or a .env file in the working directory."
+            "--token flag, WEALTHBOX_TOKEN env var, or `wbox config set-token`."
         )
     return WealthboxClient(token=token)
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/cli/doctor.py

@@ -28,7 +28,7 @@ from .self_cmd import _default_install_root
 
 def _detect_token_source(token_arg: str | None) -> tuple[str | None, str]:
     """Return (token, source_label) matching get_client's resolution order:
-    --token flag > WEALTHBOX_TOKEN env > config file > .env (loaded as env)."""
+    --token flag > WEALTHBOX_TOKEN env > config file."""
     if token_arg:
         return token_arg, "--token flag"
     env_token = os.environ.get("WEALTHBOX_TOKEN")
@@ -38,14 +38,6 @@ def _detect_token_source(token_arg: str | None) -> tuple[str | None, str]:
     cfg_token = cfg.get("token")
     if cfg_token:
         return cfg_token, f"config file ({_config_path()})"
-    try:
-        from dotenv import load_dotenv
-        load_dotenv()
-        dotenv_token = os.environ.get("WEALTHBOX_TOKEN")
-        if dotenv_token:
-            return dotenv_token, ".env file in working directory"
-    except ImportError:
-        pass
     return None, "not set"
 
 
@@ -257,7 +249,7 @@ def _ensure_firm_migrated():
 def doctor_cmd(
     token: str | None = typer.Option(
         None, "--token",
-        help="Override the API token for the smoke test. Overrides env var, config, .env.",
+        help="Override the API token for the smoke test. Overrides env var and config.",
     ),
 ) -> None:
     """Run the comprehensive doctor.
@@ -266,6 +258,6 @@ def doctor_cmd(
     is informational, not a CI gate. (A future --strict flag could change
     this for scripting.) Token is intentionally NOT bound to
     `envvar=WEALTHBOX_TOKEN` so the doctor can report whether the token came
-    from the flag, env var, config file, or .env file.
+    from the flag, env var, or config file.
     """
     run_doctor(token=token)

wealthbox_cli-2.2.0/src/wealthbox_tools/cli/me.py

@@ -0,0 +1,68 @@
+from __future__ import annotations
+
+from typing import Any
+
+import typer
+
+from ._util import (
+    OutputFormat,
+    _flatten_record,
+    _render_kv_table,
+    handle_errors,
+    output_result,
+    run_client,
+)
+
+app = typer.Typer(
+    context_settings={"help_option_names": ["-h", "--help"]},
+    help="Show info about the current authenticated user.",
+)
+
+
+def _relabel_for_table(data: dict[str, Any]) -> dict[str, Any]:
+    """Rename top-level `id` to `login_id` and add `user_id (--assigned-to)`
+    so the two IDs aren't confusable in tabular output.
+
+    The top-level `id` is a login profile (not usable for `--assigned-to`);
+    `current_user.id` is the workspace user ID that filters accept.
+    """
+    relabeled: dict[str, Any] = {}
+    for key, value in data.items():
+        relabeled["login_id" if key == "id" else key] = value
+    current_user = data.get("current_user")
+    if isinstance(current_user, dict) and "id" in current_user:
+        relabeled["user_id (--assigned-to)"] = current_user["id"]
+    return relabeled
+
+
+@app.callback(
+    invoke_without_command=True,
+    help="Show info about the current authenticated user. Use subcommands for more specific info.",
+)
+@handle_errors
+def get_me(
+    ctx: typer.Context,
+    token: str | None = typer.Option(None, envvar="WEALTHBOX_TOKEN", hidden=True),
+    fmt: OutputFormat = typer.Option(OutputFormat.JSON, "--format"),
+) -> None:
+    if ctx.invoked_subcommand is not None:
+        return
+    data = run_client(token, lambda c: c.get_me())
+    if fmt == OutputFormat.TABLE and isinstance(data, dict):
+        # Bypass output_result's collection-detection heuristic: once we drop
+        # the top-level `id` key, it would mistake `users[]` for a collection.
+        typer.echo(_render_kv_table(_flatten_record(_relabel_for_table(data))))
+        return
+    output_result(data, fmt)
+
+
+@app.command("user-id", help="Print the workspace user ID (for --assigned-to) as a bare integer.")
+@handle_errors
+def user_id(
+    token: str | None = typer.Option(None, envvar="WEALTHBOX_TOKEN", hidden=True),
+) -> None:
+    data = run_client(token, lambda c: c.get_me())
+    current_user = data.get("current_user") if isinstance(data, dict) else None
+    if not isinstance(current_user, dict) or "id" not in current_user:
+        raise ValueError("`current_user.id` missing from /me response; cannot determine user ID.")
+    typer.echo(current_user["id"])

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/cli/skills.py

@@ -295,7 +295,7 @@ def doctor_cmd(
     # canonical top-level form. Both call the same function so the output
     # never drifts. Token is intentionally not bound to envvar= so the
     # doctor can report whether the token came from the flag, env var,
-    # config file, or .env file.
+    # or config file.
     from .doctor import run_doctor
     run_doctor(token=token)
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/cli/users.py

@@ -21,4 +21,4 @@ def list_users(
     token: str | None = typer.Option(None, envvar="WEALTHBOX_TOKEN", hidden=True),
     fmt: OutputFormat = typer.Option(OutputFormat.JSON, "--format"),
 ) -> None:
-    output_result(run_client(token, lambda c: c.list_users()), fmt, fields=None if verbose else _DEFAULT_FIELDS)
+    output_result(run_client(token, lambda c: c.list_all_users()), fmt, fields=None if verbose else _DEFAULT_FIELDS)

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/skills/wealthbox-crm/SKILL.md

@@ -101,7 +101,7 @@ across every installed platform while preserving `firm/`.
   # Windows (PowerShell)
   irm https://raw.githubusercontent.com/massive-value/wealthbox-cli/main/scripts/install.ps1 | iex
   ```
-- Token configured via one of: `wbox config set-token`, `WEALTHBOX_TOKEN` env var, or `.env` file
+- Token configured via one of: `wbox config set-token` or `WEALTHBOX_TOKEN` env var
 
 Verify with: `wbox me`
 

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/skills/wealthbox-crm/references/contacts.md

@@ -20,7 +20,7 @@ wbox contacts list [OPTIONS]
 | `--household-title` | STR | Filter by household title |
 | `--tags` | STR | Comma-separated tag names |
 | `--order` | asc\|desc | Sort order |
-| `--assigned-to` | INT | User ID (fetches all pages, client-side filter) |
+| `--assigned-to` | INT | User ID (fetches all pages, client-side filter). Get yours via `wbox me user-id`, **not** `wbox me \| jq .id` (that's the login profile, which silently returns zero results). |
 | `--updated-since` | ISO datetime | Modified after this datetime |
 | `--updated-before` | ISO datetime | Modified before this datetime |
 | `--deleted-since` | ISO datetime | Deleted after this datetime |

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/skills/wealthbox-crm/references/lookups.md

@@ -6,10 +6,35 @@ Read-only resources: categories, users, activity feed, and current user info.
 
 ```bash
 wbox me [--format json|table|csv|tsv]
+wbox me user-id
 ```
 
 Returns info about the authenticated user. Good for verifying token setup and getting your user ID.
 
+### Two IDs — don't confuse them
+
+`wbox me` returns two distinct ID fields, and they are NOT interchangeable:
+
+| JSON field | What it is | Use for `--assigned-to`? |
+|------------|------------|--------------------------|
+| top-level `id` | Login profile ID (one per Wealthbox account, across workspaces) | **No** |
+| `current_user.id` (also `users[].id` for the active workspace) | Workspace user ID | **Yes** |
+
+Filters like `--assigned-to`, `--assigned-to-team`, and `--created-by` expect the workspace user ID. Passing the top-level `id` returns zero results silently — the API just ignores the filter.
+
+The safe ways to get your workspace user ID:
+
+```bash
+wbox me user-id              # prints just the integer, ready for shell substitution
+wbox me --format table       # labels the rows `login_id` vs `user_id (--assigned-to)`
+```
+
+Composing it:
+
+```bash
+wbox tasks list --assigned-to "$(wbox me user-id)"
+```
+
 ## Users
 
 ```bash
@@ -64,7 +89,10 @@ The contact-related types are also reachable as aliases under `wbox contacts cat
 ## Examples
 
 ```bash
-# Get your user ID
+# Get your workspace user ID (for --assigned-to)
+wbox me user-id
+
+# Or see both IDs side by side
 wbox me --format table
 
 # Find a user ID for assignment

{wealthbox_cli-2.0.0 → wealthbox_cli-2.2.0}/src/wealthbox_tools/skills/wealthbox-crm/references/tasks.md

@@ -13,7 +13,7 @@ wbox tasks list [OPTIONS]
 | `--contact` | INT | Filter by linked contact ID |
 | `--project` | INT | Filter by linked project ID |
 | `--opportunity` | INT | Filter by linked opportunity ID |
-| `--assigned-to` | INT | Filter by assigned user ID |
+| `--assigned-to` | INT | Filter by assigned user ID — get yours via `wbox me user-id`, **not** `wbox me \| jq .id` (that's the login profile, which silently returns zero results). |
 | `--assigned-to-team` | INT | Filter by assigned team ID |
 | `--created-by` | INT | Filter by creator user ID |
 | `--include-completed` | flag | Include completed tasks (default: outstanding only) |