Wealthbox Agreement Compliance

Wealthbox Agreement Compliance

You are running the Wealthbox Agreement Compliance skill. It pulls households from Wealthbox, scans a document vault (Box, SharePoint, or Egnyte) for client agreements, and generates a compliance gap report showing which households are missing required agreements.

CRITICAL: Never use cd in bash commands. All CLI commands use the absolute path prefix shown below.

CLI tool: node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js <command> -- all commands output JSON to stdout

${CLAUDE_SKILL_DIR} is automatically set to this skill's directory. The plugin root is two levels up.

---

Step 0: Silent Housekeeping

Run silently (do not display output). Ignore errors.

git -C ${CLAUDE_SKILL_DIR}/../.. pull --ff-only 2>/dev/null || true

npm install --prefix ${CLAUDE_SKILL_DIR}/../../scripts 2>/dev/null || true

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js check-setup 2>/dev/null

Parse the JSON. Store registered, wealthbox_connected, box_connected, sharepoint_connected, egnyte_connected.

Routing:

• If registered AND wealthbox_connected -> skip to Step 3
• If registered but NOT wealthbox_connected -> skip to Step 2
• If NOT registered -> Step 1

---

Step 1: Welcome + Registration

Display:

 __        __         _ _   _     _
 \ \      / /__  __ _| | |_| |__ | |__   _____  __
  \ \ /\ / / _ \/ _` | | __| '_ \| '_ \ / _ \ \/ /
   \ V  V /  __/ (_| | | |_| | | | |_) | (_) >  <
    \_/\_/ \___|\__,_|_|\__|_| |_|_.__/ \___/_/\_\
    _                                          _
   / \   __ _ _ __ ___  ___ _ __ ___   ___ _ __ | |_
  / _ \ / _` | '__/ _ \/ _ \ '_ ` _ \ / _ \ '_ \| __|
 / ___ \ (_| | | |  __/  __/ | | | | |  __/ | | | |_
/_/   \_\__, |_|  \___|\___|_| |_| |_|\___|_| |_|\__|
        |___/
  ____                      _ _
 / ___|___  _ __ ___  _ __ | (_) __ _ _ __   ___ ___
| |   / _ \| '_ ` _ \| '_ \| | |/ _` | '_ \ / __/ _ \
| |__| (_) | | | | | | |_) | | | (_| | | | | (_|  __/
 \____\___/|_| |_| |_| .__/|_|_|\__,_|_| |_|\___\___|
                      |_|

What	Pulls your household list from Wealthbox, scans your document vault for client agreements (CEAs, IMAs, IPSs), and generates a compliance gap report showing which households have agreements on file and which are missing them.
Who	Compliance officers, operations teams, and advisors at RIAs and wealth management firms using Wealthbox with Box, SharePoint, or Egnyte.
How	Connects to Wealthbox via API token and to your vault via OAuth. Matches household names to vault folders, scans for agreement files, and cross-references the results.

Credentials stored encrypted on LEA servers. All processing runs locally — your data flows directly between your machine and your platforms, never through LEA.

Prompt for email (plain text, NOT AskUserQuestion):

Enter your work email (registers you with LEA Skills):

Store as email.

Firm name (optional, press Enter to skip):

Store as firm_name.

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js register "<email>" "<firm_name>"

(Omit firm_name arg if empty.)

If success: true, show "Registered successfully." and proceed to Step 2.

---

Step 2: Connect to Wealthbox

Display:

To connect to Wealthbox, you need your API Access Token:

1. Log in to Wealthbox at app.crmworkspace.com
2. Click your profile icon (top right), select Settings
3. Scroll to API Access and click Create Access Token
4. Copy the token

Prompt:

Paste your Wealthbox API token:

Store as wb_token.

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js auth-wealthbox-token "<wb_token>"

If success: true:

Connected to Wealthbox as {user.name} ({user.email})

Proceed to Step 3.

If success: false, show error. AskUserQuestion: "Try again" / "Exit".

---

Step 3: Select Document Vault

Use AskUserQuestion: "Which document vault does your firm use?"

• "Box" (description: "Box.com cloud storage")
• "SharePoint" (description: "Microsoft SharePoint / OneDrive")
• "Egnyte" (description: "Egnyte cloud file server")

Store the selection as vault_platform ("box", "sharepoint", or "egnyte").

---

Step 4: Connect to Vault

Check the setup data from Step 0. If the selected vault is already connected (e.g., box_connected: true), skip to Step 5.

If Box:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js auth-box

Parse JSON. Open auth_url in browser:

open "<auth_url>"

Then poll:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js poll-box-wait "<session_id>"

Verify:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js verify-box

Show: "Connected to Box as {user.name} ({user.login})"

If SharePoint:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js auth-sharepoint

Parse JSON. Open auth_url in browser:

open "<auth_url>"

Then poll:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js poll-sharepoint-wait "<session_id>"

Verify:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js verify-sharepoint

Show: "Connected to SharePoint as {user.name} ({user.email})"

If Egnyte:

First ask for domain (plain text prompt, NOT AskUserQuestion):

Enter your Egnyte domain (e.g., if your URL is acmecorp.egnyte.com, enter acmecorp):

Store as egnyte_domain.

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js auth-egnyte "<egnyte_domain>"

Parse JSON. Open auth_url in browser:

open "<auth_url>"

Then poll:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js poll-egnyte-wait "<session_id>"

Verify:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js verify-egnyte

Show: "Connected to Egnyte as {user.name} ({user.email})"

---

Step 5: Select Root Folder

The user needs to point to the root folder that contains their client/household folders.

If Box:

List root folders:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js list-folders box 0

Show folder names (never IDs) via AskUserQuestion. Let user drill down if needed. Store the selected folder_id.

If SharePoint:

First list sites:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js list-sites

AskUserQuestion with site names. Store site_id.

Then list drives:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js list-drives "<site_id>"

AskUserQuestion with drive names. Store drive_id.

Then list root folders:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js list-folders sharepoint root "<drive_id>"

AskUserQuestion with folder names. Let user drill down. Store folder_id.

If Egnyte:

List root:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js list-folders egnyte /Shared

AskUserQuestion with folder names. Let user drill down. Store the full folder_path.

---

Step 6: Run Compliance Scan

Display:

Pulling households from Wealthbox and scanning your vault for agreements. This may take a few minutes for larger vaults...

If Box:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js scan-compliance box "<folder_id>"

If SharePoint:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js scan-compliance sharepoint "<folder_id>" "<drive_id>"

If Egnyte:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js scan-compliance egnyte "<folder_path>"

IMPORTANT: This command may take several minutes for large vaults. Do NOT set a short timeout. Use at least 300000ms (5 minutes).

Parse JSON. If success: false, show error and offer retry.

If success: true:

1. Save the full JSON to a temp file:

echo '<full_json>' > /tmp/wb-compliance-data.json

2. Generate report:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js generate-report compliance --output-file /tmp/wealthbox-agreement-compliance-report.html --data-file /tmp/wb-compliance-data.json

3. Open in browser:

open /tmp/wealthbox-agreement-compliance-report.html

4. Show summary:

Compliance scan complete. Report opened in your browser.

• {totalMatched} of {totalWbHouseholds} Wealthbox households matched to vault folders
• {withAllAgreements} fully compliant (CEA + IMA + IPS on file)
• {missingAny} with agreement gaps
• {totalUnmatchedWb} Wealthbox households with no vault match

---

Step 7: Done

Log usage silently:

node ${CLAUDE_SKILL_DIR}/../../scripts/cli.js log-usage wealthbox-agreement-compliance 2>/dev/null

Display:

Done! Got questions? Want more? [email protected]

Use AskUserQuestion: "What next?"

• "Run again" (description: "Scan a different folder or re-run") -> Go to Step 5
• "Done" (description: "Exit")

---

Error Handling

• If success: false in any CLI response, show the error and offer retry or exit
• If Wealthbox token is invalid, suggest re-running the skill
• If vault auth fails, suggest re-running to re-authorize
• Rate limit errors (429): tell user to wait a moment
• Empty results: "No contacts/households found in Wealthbox" or "No folders found in vault" (graceful, not error)
• Parse JSON from stdout only (logs go to stderr)
• For scan-compliance, use a long timeout (5+ minutes)

Bash Call Summary

Step	Command	When
0	npm install	Always (silent)
0	check-setup	Always
1	register	First run only
2	auth-wealthbox-token	First run only
3	(user selection)	Always
4	auth-{platform}	First vault connection
4	poll-{platform}-wait	First vault connection
4	verify-{platform}	Always
5	list-folders / list-sites / list-drives	Folder selection
6	scan-compliance	Main scan
6	generate-report	Report
6	open	Open report
7	log-usage	Always (silent)

Total: 7-14 bash calls depending on platform and first-run status