Add multi-currency system with exchange rate conversion

- Store earnings in native currency (MYST, GRASS) instead of USD
- Add exchange_rates.py: CoinGecko crypto rates + Frankfurter fiat rates, refreshed every 15min
- Frontend: locale-detected display currency with Intl.NumberFormat, persisted in localStorage
- Fix MystNodes collector: report MYST tokens, not USD
- Fix Grass collector: report GRASS tokens, not GRASS_POINTS
- Settings: currency dropdown with popular currencies + all ISO 4217
- Dashboard totals convert all currencies to USD server-side
- Update AGENTS.md with currency system docs and worker deployment topology

Author: GeiserX

AGENTS.md

@@ -350,7 +350,7 @@ Working collectors (12/12 deployed services):
 - **PacketStream** -- Manual JWT cookie, HTML scraping `window.userData`
 - **ProxyRack** -- API key auth, POST `/api/balance`. Per-device bandwidth (not earnings) via POST `/api/bandwidth` with `device_id` param.
 - **Storj** -- API URL-based
-- **Grass** -- Bearer token from localStorage (`app.grass.io`), `api.getgrass.io`. Returns points, not USD.
+- **Grass** -- Bearer token from localStorage (`app.grass.io`), `api.getgrass.io`. Returns GRASS token balance (converted to USD via CoinGecko).
 - **Bytelixir** -- Laravel session cookie (expires ~3.5h), `dash.bytelixir.com`. hCaptcha blocks automated login.
 
 #### Per-Node/Per-Device Earnings Support
@@ -373,8 +373,8 @@ Only MystNodes has a real per-node earnings API. Research on all 12 services:
 | **ProxyRack** | Dashboard behind Cloudflare. Need API key from browser. Device UUIDs must be manually registered in `peer.proxyrack.com` dashboard. |
 | **SpeedShare** | API domain (`api.speedshare.app`) misconfigured -- returns Telegraf metrics exporter output. Service non-functional. |
 | **Nodepay** | Behind Cloudflare protection. API access requires browser session cookies. |
-| **Grass** | Token must be extracted from browser localStorage at `app.grass.io`. Returns points (GRASS_POINTS), not USD. |
-| **Bytelixir** | Laravel session cookie expires ~3.5h. hCaptcha blocks automated login. Must manually extract cookie from browser. Most session-fragile service. |
+| **Grass** | Token must be extracted from browser localStorage at `app.grass.io`. Returns GRASS tokens (converted via exchange rates). |
+| **Bytelixir** | Laravel session cookie. hCaptcha blocks automated login. Must manually extract cookie from browser. With "Remember Me" ticked, sessions last days/weeks. |
 
 ---
 
@@ -440,9 +440,46 @@ Fleet API key set via `CASHPILOT_API_KEY` env var on all instances.
 - **MMN API key is critical**: The Mysterium container must have `MYSTNODES_API_KEY` env var or `[mmn] api-key` in `config-mainnet.toml` to link the node to the user's MystNodes cloud account.
 - **Node identity is per-volume**: The Mysterium keystore lives in the Docker volume (`mysterium-data:/var/lib/mysterium-node/keystore/`). Deleting the volume or creating a new container without the same volume generates a NEW blockchain identity.
 - **Registration is blockchain-based**: New identities must be registered on Polygon. This is triggered by Hermes and requires the MMN API key. If Hermes returns "internal error", it's a temporary server-side issue.
-- **Per-node earnings**: The MystNodes cloud API (`GET /api/v2/node?page=1&itemsPerPage=100`) returns per-node 30-day earnings in MYST. The `earningsTotal` endpoint returns pre-converted USD total.
+- **Per-node earnings**: The MystNodes cloud API (`GET /api/v2/node?page=1&itemsPerPage=100`) returns per-node 30-day earnings in MYST. The `earningsTotal` endpoint returns MYST token balance (not USD).
 - **Image name**: `mysteriumnetwork/myst` (NOT `mysteriumnet/myst`).
 
+### Multi-Currency & Exchange Rates
+
+CashPilot stores earnings in each service's **native currency** (USD, MYST, GRASS, STORJ, etc.) and converts for display.
+
+- **`app/exchange_rates.py`**: Fetches crypto→USD rates from CoinGecko (free, no key) and USD→fiat from Frankfurter API. Cached in memory, refreshed every 15 min + on startup.
+- **CoinGecko IDs**: `mysterium` (MYST), `grass` (GRASS). Add new tokens to `CRYPTO_IDS` dict.
+- **Frontend conversion**: `app.js` fetches `/api/exchange-rates`, stores rates client-side. `formatCurrency(val, nativeCurrency)` converts native→USD→display currency. `formatNative(val, currency)` shows original token amount alongside converted value.
+- **Display currency**: Auto-detected from `navigator.language` locale (e.g. `es` → EUR). User can override in Settings. Persisted in `localStorage('cp-display-currency')`.
+- **Dashboard totals**: Backend converts all non-USD balances to USD via `exchange_rates.to_usd()` for the summary total.
+- **Collector currencies**: Each collector returns its native currency in `EarningsResult.currency`. MystNodes returns `MYST`, Grass returns `GRASS`, all others return `USD`.
+
+### Worker Deployment
+
+**Always use the dedicated worker image** (`drumsergio/cashpilot-worker`), never the UI image for workers. The worker image runs `app.worker_api:app` on port 8081.
+
+**Topology:**
+- **watchtower**: `drumsergio/cashpilot` (UI, standalone mode — includes embedded local worker). Port 8085→8080. Manages local containers + collects all earnings.
+- **geiserback** (192.168.10.110): `drumsergio/cashpilot-worker`. Port 8081. Same subnet as watchtower — uses direct IP for `CASHPILOT_UI_URL`.
+- **geiserct** (192.168.20.5, user `geiser`): `drumsergio/cashpilot-worker`. Port 8081. Different subnet — **must use Tailscale MagicDNS** (`watchtower.mango-alpha.ts.net`) for `CASHPILOT_UI_URL`.
+
+```bash
+# Worker deployment (geiserback or geiserct)
+docker run -d --name cashpilot-worker --restart unless-stopped \
+  -p 8081:8081 \
+  -v /var/run/docker.sock:/var/run/docker.sock \
+  -e TZ=Europe/Madrid \
+  -e "CASHPILOT_UI_URL=http://192.168.10.100:8085" \
+  -e "CASHPILOT_API_KEY=XV5LwdpApfERQmhKbbcANI8nz3pca1Up" \
+  -e CASHPILOT_WORKER_NAME=<server-name> \
+  --security-opt no-new-privileges:true \
+  drumsergio/cashpilot-worker:latest
+```
+
+**Cross-subnet note**: geiserct uses `CASHPILOT_UI_URL=http://watchtower.mango-alpha.ts.net:8085` since 192.168.20.x cannot reach 192.168.10.x directly.
+
+**Important**: The `entrypoint.sh` does NOT switch modes — it only sets up Docker socket permissions. Mode is determined by which Docker image runs (`Dockerfile` → `app.main:app`, `Dockerfile.worker` → `app.worker_api:app`).
+
 ---
 
 ## Development

app/collectors/bytelixir.py

@@ -7,7 +7,8 @@
 To get the cookie: open dash.bytelixir.com, log in (tick "Remember Me"),
 press F12 > Application > Cookies, and copy the `bytelixir_session` value.
 
-Note: session expires after ~3.5 hours. When expired, the collector
+Note: session lifetime depends on "Remember Me" — with it ticked, cookies
+last days/weeks. Without it, they expire quickly. When expired, the collector
 returns an error that surfaces as a notification in the CashPilot UI.
 """
 

app/collectors/grass.py

@@ -61,7 +61,7 @@ async def collect(self) -> EarningsResult:
                 return EarningsResult(
                     platform=self.platform,
                     balance=round(total_points, 4),
-                    currency="GRASS_POINTS",
+                    currency="GRASS",
                 )
         except Exception as exc:
             logger.error("Grass collection failed: %s", exc)

app/collectors/mystnodes.py

@@ -97,13 +97,13 @@ async def collect(self) -> EarningsResult:
                 resp.raise_for_status()
                 data = resp.json()
 
-                # earningsTotal is already in USD
-                total_usd = float(data.get("earningsTotal", 0))
+                # earningsTotal is in MYST tokens (Polygon)
+                total_myst = float(data.get("earningsTotal", 0))
 
                 return EarningsResult(
                     platform=self.platform,
-                    balance=round(total_usd, 4),
-                    currency="USD",
+                    balance=round(total_myst, 4),
+                    currency="MYST",
                 )
         except Exception as exc:
             logger.error("MystNodes collection failed: %s", exc)

app/exchange_rates.py

@@ -0,0 +1,95 @@
+"""Exchange rate service for CashPilot.
+
+Fetches crypto-to-USD rates from CoinGecko and USD-to-fiat rates from
+Frankfurter API.  Rates are cached in memory with periodic refresh
+(every 15 minutes via the scheduler).
+
+No API keys required — both services are free-tier.
+"""
+
+from __future__ import annotations
+
+import logging
+import time
+from typing import Any
+
+import httpx
+
+logger = logging.getLogger(__name__)
+
+# CoinGecko IDs for crypto tokens tracked by CashPilot collectors.
+# Map: our internal currency code -> CoinGecko coin id
+CRYPTO_IDS: dict[str, str] = {
+    "MYST": "mysterium",
+    "GRASS": "grass",
+}
+
+CACHE_TTL = 900  # 15 minutes
+
+# In-memory caches
+_fiat_rates: dict[str, float] = {"USD": 1.0}
+_crypto_usd: dict[str, float] = {}
+_last_fetch: float = 0
+
+
+async def refresh() -> None:
+    """Fetch latest exchange rates from external APIs."""
+    global _fiat_rates, _crypto_usd, _last_fetch
+
+    try:
+        async with httpx.AsyncClient(timeout=15) as client:
+            # --- Crypto rates from CoinGecko (free, no key) ---
+            if CRYPTO_IDS:
+                ids = ",".join(CRYPTO_IDS.values())
+                resp = await client.get(
+                    "https://api.coingecko.com/api/v3/simple/price",
+                    params={"ids": ids, "vs_currencies": "usd"},
+                )
+                if resp.status_code == 200:
+                    data = resp.json()
+                    for token, cg_id in CRYPTO_IDS.items():
+                        price = (data.get(cg_id) or {}).get("usd")
+                        if price is not None:
+                            _crypto_usd[token] = float(price)
+
+            # --- Fiat rates from Frankfurter (free, no key) ---
+            resp = await client.get(
+                "https://api.frankfurter.app/latest",
+                params={"from": "USD"},
+            )
+            if resp.status_code == 200:
+                data = resp.json()
+                new_rates: dict[str, float] = {"USD": 1.0}
+                for code, rate in data.get("rates", {}).items():
+                    new_rates[code] = float(rate)
+                _fiat_rates = new_rates
+
+        _last_fetch = time.time()
+        logger.info(
+            "Exchange rates updated: %d fiat currencies, %d crypto tokens",
+            len(_fiat_rates),
+            len(_crypto_usd),
+        )
+    except Exception as exc:
+        logger.error("Exchange rate fetch failed: %s", exc)
+
+
+def get_all() -> dict[str, Any]:
+    """Return all cached rates for the frontend."""
+    return {
+        "fiat": dict(_fiat_rates),
+        "crypto_usd": dict(_crypto_usd),
+        "last_updated": _last_fetch,
+    }
+
+
+def to_usd(amount: float, currency: str) -> float | None:
+    """Convert an amount in *currency* to USD.
+
+    Returns None if no rate is available (e.g. unknown token).
+    """
+    if currency == "USD":
+        return amount
+    if currency in _crypto_usd:
+        return amount * _crypto_usd[currency]
+    return None

app/main.py

@@ -21,7 +21,7 @@
 from fastapi.templating import Jinja2Templates
 from pydantic import BaseModel
 
-from app import auth, catalog, compose_generator, database, orchestrator
+from app import auth, catalog, compose_generator, database, exchange_rates, orchestrator
 
 logging.basicConfig(
     level=logging.INFO,
@@ -138,7 +138,9 @@ async def lifespan(app: FastAPI):
     scheduler.add_job(_run_health_check, "interval", minutes=5, id="health_check")
     scheduler.add_job(_check_stale_workers, "interval", minutes=2, id="stale_workers")
     scheduler.add_job(_run_data_retention, "interval", hours=24, id="data_retention")
+    scheduler.add_job(exchange_rates.refresh, "interval", minutes=15, id="exchange_rates")
     scheduler.start()
+    await exchange_rates.refresh()
     docker_mode = "direct" if orchestrator.docker_available() else "monitor-only"
     logger.info("CashPilot started (Docker: %s)", docker_mode)
 
@@ -489,6 +491,7 @@ async def api_services_deployed(request: Request) -> list[dict[str, Any]]:
     # Get latest earnings per platform for balance display
     earnings = await database.get_earnings_summary()
     balance_map = {e["platform"]: e["balance"] for e in earnings}
+    currency_map = {e["platform"]: e["currency"] for e in earnings}
 
     # Get health scores
     health_scores = await database.get_health_scores(7)
@@ -542,6 +545,7 @@ async def api_services_deployed(request: Request) -> list[dict[str, Any]]:
             "name": svc["name"] if svc else slug,
             "container_status": agg["best_status"],
             "balance": balance_map.get(slug, 0.0),
+            "currency": currency_map.get(slug, "USD"),
             "cpu": f"{agg['total_cpu']:.2f}",
             "memory": f"{agg['total_mem']:.1f} MB",
             "image": agg["image"],
@@ -577,6 +581,7 @@ async def api_services_deployed(request: Request) -> list[dict[str, Any]]:
             "name": svc["name"] if svc else slug,
             "container_status": "external",
             "balance": balance_map.get(slug, 0.0),
+            "currency": currency_map.get(slug, "USD"),
             "cpu": "",
             "memory": "",
             "image": "",
@@ -900,6 +905,14 @@ async def api_earnings_summary(request: Request) -> dict[str, Any]:
     _require_auth_api(request)
     summary = await database.get_earnings_dashboard_summary()
 
+    # Include non-USD balances converted to USD in the total
+    all_earnings = await database.get_earnings_summary()
+    for e in all_earnings:
+        if e["currency"] != "USD":
+            usd_val = exchange_rates.to_usd(e["balance"], e["currency"])
+            if usd_val is not None:
+                summary["total"] = round(summary["total"] + usd_val, 2)
+
     # Count active (running) services — use cached data for instant response
     active = 0
     try:
@@ -991,6 +1004,13 @@ async def api_collector_alerts(request: Request) -> list[dict[str, str]]:
     return _collector_alerts
 
 
+@app.get("/api/exchange-rates")
+async def api_exchange_rates(request: Request) -> dict[str, Any]:
+    """Return current exchange rates (fiat + crypto) for frontend conversion."""
+    _require_auth_api(request)
+    return exchange_rates.get_all()
+
+
 @app.get("/api/services/{slug}/per-node-earnings")
 async def api_per_node_earnings(request: Request, slug: str) -> list[dict[str, Any]]:
     """Return per-node earnings for services that support it (e.g. MystNodes)."""