EODHD CLI

---

name: eodhd description: Plan, build, review, or extend a stateless Bash CLI wrapper for the publicly documented EODHD API, intended for OpenClaw agents and Clawhub.ai distribution. Use when Codex needs to define command structure, auth handling, error semantics, redaction rules, CI, packaging, or skill metadata for an open source EODHD integration that must follow OpenClaw secrets management and avoid leaking sensitive data to stdout, stderr, logs, examples, or repo artifacts.

---

EODHD

Overview

Build the wrapper as a small, stateless Bash CLI that translates stable subcommands into EODHD HTTPS requests and emits machine-friendly output. Keep secrets outside the repo and outside the CLI's own persistence model by aligning auth to OpenClaw-managed environment injection.

Workflow

1. Confirm the task shape. - If the user is asking for a plan, load references/implementation-plan.md. - If the user is asking how to wire credentials safely, load references/openclaw-secrets.md. - If the user is asking for actual code changes, implement the narrowest useful slice first and preserve stateless behavior.

2. Hold the contract steady. - Prefer eodhd as the binary name. - Default to JSON on stdout and diagnostics on stderr. - Exit non-zero on HTTP, auth, or argument errors. - Do not create config files, caches, token stores, or hidden state.

3. Keep auth OpenClaw-native. - Expect EODHD_API_KEY to be injected by OpenClaw. - Allow a one-shot explicit override like --api-key only if the user asks for it or the implementation already exposes it. - Do not read plaintext secrets from repo files, sample configs, shell history helpers, or generated artifacts. - Keep the publish metadata aligned with that contract by declaring EODHD_API_KEY as the primary required credential.

4. Enforce redaction and logging hygiene. - Never print the raw API key to stdout or stderr. - Redact secrets in debug output, dry-run output, request traces, and test snapshots. - Avoid set -x unless xtrace output is redirected through a sanitizer. - Treat query strings, headers, and copied curl commands as sensitive if they can contain api_token.

5. Prefer a narrow, agent-friendly surface. - Start with stable commands such as eod, fundamentals, real-time, search, exchanges, and raw. - Add generic --query key=value support before adding many bespoke flags. - Use a raw escape hatch for unsupported endpoints instead of blocking new EODHD API coverage.

6. Preserve public-distribution constraints. - Assume the repo is public. - Use only public EODHD docs and public sample symbols in examples. - Avoid local-machine assumptions, personal data, or environment-specific artifacts. - Verify the release bundle contains scripts/eodhd and the metadata that declares it.

Implementation Rules

Keep the CLI dependency-light: Bash plus curl as the baseline.

Use deterministic argument parsing and stable exit codes.

Separate URL construction, request execution, error translation, and output handling into small shell functions.

Make debug behavior opt-in with --verbose or --dry-run.

If tests are added, prefer smoke tests around URL generation, argument validation, and redaction.

Deliverables

scripts/eodhd for the CLI entrypoint when implementation starts

scripts/check-package.sh for package and manifest consistency checks

references/implementation-plan.md for milestones and acceptance criteria

references/openclaw-secrets.md for secret and logging constraints

agents/openai.yaml for Clawhub/OpenAI-facing metadata

Validation

Check that examples never expose a real token.

Check that debug or dry-run output replaces token values with a fixed mask such as *REDACTED*.

Check that auth failure, HTTP failure, and usage failure produce distinct exit codes or clearly distinct stderr messages.

Check that the manifest declares EODHD_API_KEY and includes scripts/eodhd in the packaged files.

Check that the repo contains no .env, token snapshots, or generated local artifacts.

Check that examples never expose a real token.

Check that debug or dry-run output replaces token values with a fixed mask such as *REDACTED*.

Check that auth failure, HTTP failure, and usage failure produce distinct exit codes or clearly distinct stderr messages.

Check that the manifest declares EODHD_API_KEY and includes scripts/eodhd in the packaged files.

Check that the repo contains no .env, token snapshots, or generated local artifacts.