@heyamiko/amiko-cli 0.10.1-beta.4 → 0.11.0-beta.1

package/README.md

@@ -1,6 +1,6 @@
-# @heyamiko/amiko-cli (v0.10.1-beta.4)
+# @heyamiko/amiko-cli (v0.11.0-beta.1)
 
-Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed, Composio apps) from the terminal. Works for both human users and AI agents running on OpenClaw.
+Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
 ## Install
 
@@ -16,15 +16,15 @@ amiko update
 
 ## Quick Start
 
-Auth is loaded from `.amiko.json` found in the current working directory (or any parent). The only required field is `amikoTwinToken`. The CLI walks upward from cwd; if none is found it falls back to `/data/.openclaw/workspace/.amiko.json`.
+Auth is loaded from environment variables on most hosts:
 
-```json
-{
-  "amikoTwinToken": "clawd-...",
-  "amikoTwinId": "twin_..."
-}
+```bash
+export AMIKO_TWIN_TOKEN="clawd-..."
+export AMIKO_TWIN_ID="twin_..."
 ```
 
+On OpenClaw twin containers the platform writes `/data/.openclaw/workspace/.amiko.json` during init and the CLI reads it automatically — no env vars needed. See [Authentication](#authentication) for the full resolution order and all supported keys.
+
 All paid operations (credits topup, wallet transfer, swap) are signed by the Amiko platform on your behalf — the CLI never holds private keys.
 
 ```bash
@@ -250,25 +250,28 @@ This registers the CLI's skill file so the agent discovers all commands through
 
 ### Authentication
 
-Agents auto-authenticate via `.amiko.json` — no manual connect needed. The platform writes this file during twin init with wallets, billing config, and twin token.
+Resolution order (first match wins):
+
+1. **OpenClaw only**: `/data/.openclaw/workspace/.amiko.json` (written by the platform during twin init; the CLI is detected as OpenClaw when `/data/.openclaw` exists *and* the process cwd is under `/data/.openclaw/workspace`).
+2. **Everywhere else**: environment variables.
+
+Non-OpenClaw hosts do **not** read any `.amiko.json` — cwd doesn't matter, and the CLI never walks the filesystem looking for auth.
 
 ```bash
-# Agent environment — just works
+# Local / CI / containers / etc. — env vars
+export AMIKO_TWIN_TOKEN="clawd-..."
+export AMIKO_TWIN_ID="twin_..."
 amiko credits balance
-amiko markets search "trending topics"
-amiko credits topup 10000 --token AMIKO --yes
 ```
 
-The CLI finds `.amiko.json` by:
-1. Walking up from the current working directory.
-2. Falling back to `/data/.openclaw/workspace/.amiko.json`.
+Supported env vars:
+- `AMIKO_TWIN_TOKEN` — **required** auth token
+- `AMIKO_TWIN_ID` — twin identifier (required for paid ops)
+- `AMIKO_USER_ID` — user identifier (optional, for MPP topup)
+- `AMIKO_PLATFORM_URL` — platform base URL override
+- `AMIKO_API_BASE` — MPP service URL override
 
-Supported keys (both camelCase and SCREAMING_SNAKE_CASE):
-- `amikoTwinToken` / `AMIKO_TWIN_TOKEN` — **required** auth token
-- `amikoTwinId` / `AMIKO_TWIN_ID` — twin identifier (needed for paid ops)
-- `amikoUserId` / `AMIKO_USER_ID` — user identifier (optional, for MPP topup)
-- `amikoPlatformUrl` / `AMIKO_PLATFORM_URL` — platform base URL override
-- `apiBase` — MPP service URL override
+The `.amiko.json` file (OpenClaw only) accepts the same keys in either camelCase (`amikoTwinToken`, `amikoTwinId`, ...) or SCREAMING_SNAKE_CASE form.
 
 ## Configuration
 
@@ -303,8 +306,7 @@ src/
 │   ├── avatar.ts         # avatar update
 │   ├── friends.ts        # friends list, requests, add, accept, remove, matches, reports
 │   ├── users.ts          # users search, profile
-│   ├── feed.ts           # feed, post create, post comment
-│   └── composio.ts       # composio connect, composio disconnect
+│   └── feed.ts           # feed, post create, post comment
 └── lib/
     ├── config.ts          # defaults + resolved auth wrapper
     ├── agent-config.ts    # .amiko.json reader + auth resolution
@@ -320,7 +322,7 @@ src/
 
 ## Twin & Social Commands (v0.8.0)
 
-The CLI also manages the twin's identity, documents, voice, avatar, friends, feed, and Composio connections via the amiko-web platform API.
+The CLI also manages the twin's identity, documents, voice, avatar, friends, and feed via the amiko-web platform API.
 
 ```bash
 # Identity
@@ -367,21 +369,17 @@ amiko post create --content "private note" --visibility private
 amiko post create --content "look" --media https://...jpg
 amiko post comment --id <postId> --comment "great post"
 amiko post comment --id <postId> --comment "nice!" --media https://...jpg
-
-# Composio
-amiko composio connect --app gmail      # prints OAuth URL
-amiko composio disconnect --app gmail --yes
 ```
 
 Every new command accepts `--json` for structured output and `--twin <id>` where a target twin is needed.
 
-**Destructive or identity-changing commands** (`docs delete`, `friends remove`, `composio disconnect`, `voice reset`, `avatar update`, `twin update --public`) prompt for confirmation in a TTY and require `--yes` in non-interactive shells.
+**Destructive or identity-changing commands** (`docs delete`, `friends remove`, `voice reset`, `avatar update`, `twin update --public`) prompt for confirmation in a TTY and require `--yes` in non-interactive shells.
 
 ## API Endpoints
 
 | Client | Base URL | Purpose |
 |--------|----------|---------|
-| Platform | `platform.heyamiko.com` | Twin identity, wallets, credits, transfers/swaps, docs, voice, avatar, friends, feed, Composio |
+| Platform | `platform.heyamiko.com` | Twin identity, wallets, credits, transfers/swaps, docs, voice, avatar, friends, feed |
 | MPP API | `mpp.amikomarkets.com` | Marketplace services: search, image, amazon, audio |
 
 ## Build
@@ -393,6 +391,16 @@ npm publish
 
 ## Changelog
 
+### 0.11.0-beta.1
+
+- **`amiko composio` removed (breaking).** The Composio OAuth-connection commands (`composio connect`, `composio disconnect`) are gone — `src/commands/composio.ts` deleted, `composio` command group dropped from `src/index.ts`. SKILL.md frontmatter, command-groups list, `--yes`-gated list, and the dedicated `## Composio` block are all removed; README's lead paragraph, architecture tree, destructive-ops list, Platform-table row, and Composio code-block example are updated to match. Scripts that called `amiko composio ...` will now error with "unknown command".
+
+### 0.11.0-beta.0
+
+- **Non-OpenClaw auth is env-var-only (breaking).** `resolveAuth()` no longer reads `.amiko.json` from cwd or anywhere except `/data/.openclaw/workspace/.amiko.json` (gated on `isOpenclawEnvironment()`). The previous "check `cwd/.amiko.json`, then fall back to env" path is gone — on local/CI/non-OpenClaw containers the CLI looks at `AMIKO_TWIN_TOKEN` / `AMIKO_TWIN_ID` directly and ignores any `.amiko.json` you might have lying around. cwd no longer affects auth anywhere off OpenClaw. README's Quick Start + Agent Integration → Authentication sections rewritten; `NO_TOKEN_HINT` points at the env vars (no more "place .amiko.json in cwd" tip).
+- **`amiko memory sync` removed, replaced by `amiko memory upload <file...>` (breaking).** The old `sync` command walked a `MEMORY.md` index plus `memory/**/*.md` under the OpenClaw workspace — useless for any agent that doesn't store memory on disk in that layout. `upload` takes one or more explicit paths instead: single file → `POST /api/memory-files`, multiple → batched `POST /api/memory-files/bulk` (100/batch). Default server-side path key is `basename(file)`; `--key <key>` overrides it but only for a single-file upload. Duplicate basenames within one call error out before any request fires. `--dry-run` and `--prune` are gone — for prune behavior use `memory rm` against listed memories. `memory status` unchanged (still shows memory_files count, which is still meaningful for uploaded files). All the local-workspace scanning helpers (`collectMemoryFiles`, `walkMarkdown`, `extractMarkdownLinks`, `isInsideRoot`, `fetchAllMemoryFiles`, `DEFAULT_WORKSPACE = "/data/.openclaw/workspace"`) are deleted; `src/commands/memory.ts` drops from ~630 to ~360 lines. Cap per upload: 1 MB (`MAX_UPLOAD_BYTES`).
+- SKILL.md updated: the "Sync periodically — Run `amiko memory sync` ..." instruction is now "Upload changed files with `amiko memory upload`"; no other behavior change.
+
 ### 0.10.1-beta.4
 
 - **`amiko conversation` removed (breaking).** DMs / chat history are now served by the openhermit gateway's built-in `session_list` / `session_read` tools (unified view across the agent's local sessions and platform DMs), so the CLI no longer needs `conversation list / find / create / read / send`. `src/commands/conversation.ts` deleted; index registration + command group removed; SKILL.md frontmatter and Conversations section rewritten to route DM questions to the gateway tools and the remaining notifications-only block renamed `## Notifications`. Skill description and command-groups paragraph updated; the "did anyone DM me?" example row dropped from the cold-start examples table. Update any scripts that ran `amiko conversation` — there is no shim, the command returns "unknown command".

package/dist/index.js

@@ -25832,7 +25832,6 @@ var source_default = chalk;
 
 // src/lib/agent-config.ts
 import { existsSync, readFileSync, statSync } from "node:fs";
-import { join } from "node:path";
 var OPENCLAW_ROOT = "/data/.openclaw";
 var OPENCLAW_WORKSPACE_PREFIX = "/data/.openclaw/workspace";
 var OPENCLAW_AMIKO_JSON = "/data/.openclaw/workspace/.amiko.json";
@@ -25846,9 +25845,6 @@ function isOpenclawEnvironment() {
   return process.cwd().startsWith(OPENCLAW_WORKSPACE_PREFIX);
 }
 function findAmikoJsonPath() {
-  const cwdPath = join(process.cwd(), ".amiko.json");
-  if (existsSync(cwdPath))
-    return cwdPath;
   if (isOpenclawEnvironment() && existsSync(OPENCLAW_AMIKO_JSON)) {
     return OPENCLAW_AMIKO_JSON;
   }
@@ -25889,13 +25885,13 @@ function resolveAuth() {
   }
   return readFromEnv();
 }
-var NO_TOKEN_HINT = "No twin token found. Set AMIKO_TWIN_TOKEN env var, or place .amiko.json with amikoTwinToken in the current directory.";
+var NO_TOKEN_HINT = "No twin token found. Set AMIKO_TWIN_TOKEN and AMIKO_TWIN_ID environment variables.";
 function requireAuth() {
   const auth = resolveAuth();
   if (!auth.twinToken)
     throw new Error(NO_TOKEN_HINT);
   if (!auth.twinId) {
-    throw new Error("No twin id found. Set AMIKO_TWIN_ID env var, or add amikoTwinId to .amiko.json.");
+    throw new Error("No twin id found. Set AMIKO_TWIN_ID env var.");
   }
   return auth;
 }
@@ -27067,7 +27063,7 @@ function baseUrl(auth) {
 function authHeader(auth) {
   if (auth.twinToken)
     return `Bearer ${auth.twinToken}`;
-  throw new Error("No twin token found. Set AMIKO_TWIN_TOKEN env var, or place .amiko.json with amikoTwinToken in the current directory.");
+  throw new Error("No twin token found. Set AMIKO_TWIN_TOKEN and AMIKO_TWIN_ID environment variables.");
 }
 async function amikoWebFetch(auth, path, opts = {}) {
   const url = new URL(`${baseUrl(auth)}${path}`);
@@ -30870,87 +30866,6 @@ function registerReviewCommand(program2) {
   });
 }
 
-// src/commands/composio.ts
-function twinFromFlag3(opts) {
-  const config2 = loadConfig();
-  const auth = resolveAuth();
-  try {
-    return { twinId: resolveTwinId({ flag: opts.twin, config: config2, auth }), auth };
-  } catch (e5) {
-    if (e5 instanceof TwinResolutionError) {
-      console.error(error(e5.message));
-      process.exit(1);
-    }
-    throw e5;
-  }
-}
-function registerComposioCommand(program2) {
-  program2.command("connect").description("Start Composio OAuth for an app (gmail, github, ...)").requiredOption("--app <slug>", "App name (e.g. gmail)").option("--twin <idOrName>", "Target twin id or name").option("--redirect <url>", "Override OAuth redirect URL").option("--force", "Force reconnect if already connected").option("--json", "Output as JSON").action(async (opts) => {
-    const { twinId, auth } = twinFromFlag3(opts);
-    const spinner = opts.json ? null : ora(`Connecting ${opts.app}...`).start();
-    try {
-      const data = await amikoWebFetch(auth, `/api/agents/${twinId}/composio/connect`, {
-        method: "POST",
-        body: {
-          appName: opts.app,
-          redirectUrl: opts.redirect,
-          forceReconnect: opts.force ?? false
-        }
-      });
-      spinner?.stop();
-      renderOutput(data, (d) => {
-        if (d.alreadyConnected) {
-          console.log(success(`${opts.app} is already connected`));
-          if (d.connectionId)
-            console.log(label("Connection ID", d.connectionId));
-          return;
-        }
-        console.log(success(`OAuth URL ready for ${opts.app}`));
-        if (d.redirectUrl) {
-          console.log("");
-          console.log(d.redirectUrl);
-          console.log("");
-          console.log(dim("Open this URL in a browser to complete the connection."));
-        }
-        if (d.connectionId)
-          console.log(label("Connection ID", d.connectionId));
-      }, { json: opts.json });
-    } catch (e5) {
-      spinner?.stop();
-      console.error(error(e5 instanceof Error ? e5.message : String(e5)));
-      process.exit(1);
-    }
-  });
-  program2.command("disconnect").description("Disconnect a Composio app for the twin").requiredOption("--app <slug>", "App name (e.g. gmail)").option("--twin <idOrName>", "Target twin id or name").option("--yes", "Skip confirmation").option("--json", "Output as JSON").action(async (opts) => {
-    const { twinId, auth } = twinFromFlag3(opts);
-    await confirmDestructive({
-      action: `Disconnect ${opts.app}`,
-      detail: "The twin will lose access to the app's tools until reconnected.",
-      yes: opts.yes,
-      commandExample: `amiko composio disconnect --app ${opts.app}`
-    });
-    const spinner = opts.json ? null : ora("Finding connection...").start();
-    try {
-      const connections = await amikoWebFetch(auth, `/api/agents/${twinId}/composio/connections`);
-      const match = connections.details?.find((d) => d.appName?.toLowerCase() === opts.app.toLowerCase());
-      if (!match?.id) {
-        spinner?.stop();
-        console.error(error(`No active connection for "${opts.app}". Connected: ${connections.connections?.join(", ") || "none"}`));
-        process.exit(1);
-      }
-      if (spinner)
-        spinner.text = `Disconnecting ${opts.app}...`;
-      const result = await amikoWebFetch(auth, `/api/agents/${twinId}/composio/connections`, { method: "DELETE", body: { connectionId: match.id } });
-      spinner?.stop();
-      renderOutput(result, () => console.log(success(`Disconnected ${opts.app}`)), { json: opts.json });
-    } catch (e5) {
-      spinner?.stop();
-      console.error(error(e5 instanceof Error ? e5.message : String(e5)));
-      process.exit(1);
-    }
-  });
-}
-
 // src/commands/notifications.ts
 function registerNotificationsCommand(program2) {
   program2.command("list").description("List platform notifications (friend requests, system alerts, activity)").option("--limit <n>", "Max results (1–100)", "20").option("--cursor <iso>", "Page older items via next_cursor from a prior call").option("--unread", "Show only unread").option("--json", "Output as JSON").action(async (opts) => {
@@ -31019,16 +30934,12 @@ function registerNotificationsCommand(program2) {
 }
 
 // src/commands/memory.ts
-import { existsSync as existsSync2, lstatSync, readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
-import { dirname, isAbsolute, normalize, relative, resolve } from "node:path";
-function isInsideRoot(abs, root) {
-  const rel = relative(root, abs);
-  return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
-}
+import { existsSync as existsSync2, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import { basename as basename3, resolve } from "node:path";
 var VALID_CATEGORIES = ["fact", "preference", "pattern", "decision", "context"];
 var VALID_SOURCES = ["chat", "file", "manual"];
-var DEFAULT_WORKSPACE = "/data/.openclaw/workspace";
-var SYNC_BATCH_SIZE = 100;
+var UPLOAD_BATCH_SIZE = 100;
+var MAX_UPLOAD_BYTES = 1e6;
 function fail(msg) {
   console.error(error(msg));
   process.exit(1);
@@ -31053,7 +30964,7 @@ function fmtMemory(m) {
   console.log(m.content);
 }
 function registerMemoryCommand(program2) {
-  const memory = program2.command("memory").description("Manage cross-agent memories — add, list, search, remove, sync local files");
+  const memory = program2.command("memory").description("Manage cross-agent memories — add, list, search, remove, upload files");
   memory.command("add <content>").description("Add a single memory directly").option("--category <cat>", `Category (${VALID_CATEGORIES.join("|")})`, "fact").option("--tags <list>", "Comma-separated tags (max 10)").option("--source <src>", `Source (${VALID_SOURCES.join("|")})`, "manual").option("--twin <twinId>", "Override twin_id (defaults to scopedTwinId)").option("--json", "Output as JSON").action(async (content, opts) => {
     if (!content || !content.trim())
       fail("Content is required and cannot be empty.");
@@ -31172,7 +31083,7 @@ function registerMemoryCommand(program2) {
       fail(e5 instanceof Error ? e5.message : String(e5));
     }
   });
-  memory.command("status").description("Show counts of memories and synced memory files").option("--json", "Output as JSON").action(async (opts) => {
+  memory.command("status").description("Show counts of memories and uploaded memory files").option("--json", "Output as JSON").action(async (opts) => {
     const auth = resolveAuth();
     const spinner = opts.json ? null : ora("Loading status...").start();
     try {
@@ -31194,79 +31105,89 @@ function registerMemoryCommand(program2) {
       fail(e5 instanceof Error ? e5.message : String(e5));
     }
   });
-  memory.command("sync").description("Sync MEMORY.md, its referenced files, and every .md under <workspace>/memory/ (one-way: local → server)").option("--path <dir>", `Workspace dir (default ${DEFAULT_WORKSPACE}). Looks for MEMORY.md, memory/MEMORY.md, and memory/**/*.md`).option("--dry-run", "Print what would be synced without uploading").option("--prune", "Delete server-side memory files that no longer exist locally").option("--json", "Output as JSON").action(async (opts) => {
-    const root = resolve(opts.path || DEFAULT_WORKSPACE);
-    const candidateIndexes = [
-      resolve(root, "MEMORY.md"),
-      resolve(root, "memory", "MEMORY.md")
-    ].filter((p) => existsSync2(p));
-    const memoryDir = resolve(root, "memory");
-    const memoryDirExists = existsSync2(memoryDir) && statSync2(memoryDir).isDirectory();
-    if (!candidateIndexes.length && !memoryDirExists) {
-      fail(`No MEMORY.md or memory/ folder found under ${root}. Expected ${root}/MEMORY.md or ${root}/memory/.`);
-    }
-    const collected = collectMemoryFiles(root, candidateIndexes, memoryDirExists ? memoryDir : null);
-    if (collected.errors.length && !opts.json) {
-      for (const e5 of collected.errors)
-        console.error(error(e5));
-    }
-    const files = collected.files;
-    if (opts.dryRun) {
-      renderOutput({ root, files: files.map((f) => f.path), prune: !!opts.prune }, (d) => {
-        console.log(heading(`Dry run — ${d.files.length} file(s)`));
-        for (const p of d.files)
-          console.log(`  ${p}`);
-        if (d.prune)
-          console.log(dim("--prune would remove server files not listed above."));
-      }, { json: opts.json });
-      return;
+  memory.command("upload <file...>").description("Upload one or more text files as memory documents (server extracts memories from each). Path key defaults to basename.").option("--key <key>", "Override the server-side path key (single file only)").option("--twin <twinId>", "Override twin_id (defaults to scopedTwinId)").option("--json", "Output as JSON").action(async (files, opts) => {
+    if (!files || files.length === 0)
+      fail("At least one file path is required.");
+    const keyOverride = opts.key !== undefined ? opts.key.trim() : undefined;
+    if (opts.key !== undefined && !keyOverride) {
+      fail("--key cannot be empty or whitespace-only.");
     }
-    if (!files.length) {
-      renderOutput({ synced: 0, changed: 0, errors: 0, extracted: 0 }, () => console.log(dim("Nothing to sync.")), { json: opts.json });
-      return;
+    if (keyOverride && files.length > 1) {
+      fail("--key can only be used when uploading a single file.");
+    }
+    const prepared = [];
+    const seenKeys = new Set;
+    for (const f of files) {
+      const abs = resolve(f);
+      if (!existsSync2(abs))
+        fail(`File not found: ${f}`);
+      const st = statSync2(abs);
+      if (!st.isFile())
+        fail(`Not a regular file: ${f}`);
+      if (st.size > MAX_UPLOAD_BYTES) {
+        fail(`${f} is ${st.size} bytes; max ${MAX_UPLOAD_BYTES}.`);
+      }
+      let content;
+      try {
+        content = readFileSync2(abs, "utf-8");
+      } catch (e5) {
+        fail(`Failed to read ${f}: ${e5 instanceof Error ? e5.message : String(e5)}`);
+      }
+      const key = keyOverride && files.length === 1 ? keyOverride : basename3(abs);
+      if (seenKeys.has(key)) {
+        fail(`Duplicate path key "${key}" within this upload. Run separately or pass --key per file.`);
+      }
+      seenKeys.add(key);
+      prepared.push({ path: key, content, source: f });
     }
     const auth = resolveAuth();
-    const spinner = opts.json ? null : ora(`Syncing ${files.length} file(s)...`).start();
+    const spinner = opts.json ? null : ora(`Uploading ${prepared.length} file(s)...`).start();
     try {
-      const allResults = [];
-      for (let i = 0;i < files.length; i += SYNC_BATCH_SIZE) {
-        const chunk = files.slice(i, i + SYNC_BATCH_SIZE);
-        const data = await amikoWebFetch(auth, "/api/memory-files/bulk", {
+      let results;
+      if (prepared.length === 1) {
+        const f = prepared[0];
+        const data = await amikoWebFetch(auth, "/api/memory-files", {
           method: "POST",
-          body: { files: chunk }
+          body: {
+            path: f.path,
+            content: f.content,
+            twin_id: opts.twin
+          },
+          timeoutMs: 120000
         });
-        allResults.push(...data.results);
-      }
-      let pruned = 0;
-      const pruneErrors = [];
-      if (opts.prune) {
-        const localPaths = new Set(files.map((f) => f.path));
-        const remote = await fetchAllMemoryFiles(auth);
-        const stale = remote.filter((f) => !localPaths.has(f.path));
-        for (const f of stale) {
-          try {
-            await amikoWebFetch(auth, `/api/memory-files/${encodeURIComponent(f.id)}`, { method: "DELETE" });
-            pruned++;
-          } catch (e5) {
-            pruneErrors.push(`${f.path}: ${e5 instanceof Error ? e5.message : String(e5)}`);
+        results = [
+          {
+            path: f.path,
+            file_id: data.file_id ?? data.id,
+            changed: data.changed,
+            extracted: data.extracted
           }
+        ];
+      } else {
+        results = [];
+        for (let i = 0;i < prepared.length; i += UPLOAD_BATCH_SIZE) {
+          const chunk = prepared.slice(i, i + UPLOAD_BATCH_SIZE);
+          const data = await amikoWebFetch(auth, "/api/memory-files/bulk", {
+            method: "POST",
+            body: {
+              files: chunk.map((c) => ({
+                path: c.path,
+                content: c.content,
+                twin_id: opts.twin
+              }))
+            },
+            timeoutMs: 120000
+          });
+          results.push(...data.results);
         }
       }
       spinner?.stop();
-      const changed = allResults.filter((r) => r.changed).length;
-      const errors3 = allResults.filter((r) => r.error).length;
-      const extracted = allResults.reduce((acc, r) => acc + (r.extracted ?? 0), 0);
-      renderOutput({
-        synced: allResults.length,
-        changed,
-        errors: errors3,
-        extracted,
-        pruned,
-        prune_errors: pruneErrors,
-        results: allResults
-      }, (d) => {
-        console.log(success(`${d.synced} file(s) synced (${d.changed} changed, ${d.errors} errors), ${d.extracted} memories extracted`));
-        for (const r of allResults) {
+      const changed = results.filter((r) => r.changed).length;
+      const errors3 = results.filter((r) => r.error).length;
+      const extracted = results.reduce((acc, r) => acc + (r.extracted ?? 0), 0);
+      renderOutput({ uploaded: results.length, changed, errors: errors3, extracted, results }, (d) => {
+        console.log(success(`${d.uploaded} file(s) uploaded (${d.changed} changed, ${d.errors} errors), ${d.extracted} memories extracted`));
+        for (const r of results) {
           if (r.error) {
             console.log(error(`${r.path}: ${r.error}`));
           } else if (r.changed) {
@@ -31275,12 +31196,6 @@ function registerMemoryCommand(program2) {
             console.log(`  ${r.path} ${dim("(unchanged)")}`);
           }
         }
-        if (opts.prune) {
-          console.log("");
-          console.log(label("Pruned", String(d.pruned)));
-          for (const e5 of pruneErrors)
-            console.log(error(e5));
-        }
       }, { json: opts.json });
     } catch (e5) {
       spinner?.stop();
@@ -31288,126 +31203,6 @@ function registerMemoryCommand(program2) {
     }
   });
 }
-function collectMemoryFiles(root, indexPaths, memoryDir) {
-  const errors3 = [];
-  const seen = new Set;
-  const files = [];
-  for (const indexPath of indexPaths) {
-    const indexContent = safeRead(indexPath, errors3);
-    if (indexContent === null)
-      continue;
-    pushFile(files, seen, indexPath, indexContent, root);
-    const indexDir = dirname(indexPath);
-    for (const ref of extractMarkdownLinks(indexContent)) {
-      if (isExternal(ref))
-        continue;
-      const abs = normalize(isAbsolute(ref) ? ref : resolve(indexDir, ref));
-      if (!isInsideRoot(abs, root)) {
-        errors3.push(`Skipping ${ref}: outside workspace ${root}`);
-        continue;
-      }
-      if (!existsSync2(abs)) {
-        errors3.push(`Referenced file missing: ${ref}`);
-        continue;
-      }
-      const st = lstatSync(abs);
-      if (st.isSymbolicLink()) {
-        errors3.push(`Skipping ${ref}: symlinks not followed`);
-        continue;
-      }
-      if (!st.isFile())
-        continue;
-      const content = safeRead(abs, errors3);
-      if (content === null)
-        continue;
-      pushFile(files, seen, abs, content, root);
-    }
-  }
-  if (memoryDir) {
-    for (const abs of walkMarkdown(memoryDir, errors3)) {
-      const content = safeRead(abs, errors3);
-      if (content === null)
-        continue;
-      pushFile(files, seen, abs, content, root);
-    }
-  }
-  return { files, errors: errors3 };
-}
-function walkMarkdown(dir, errors3) {
-  const out = [];
-  let names;
-  try {
-    names = readdirSync(dir);
-  } catch (e5) {
-    errors3.push(`Failed to read ${dir}: ${e5 instanceof Error ? e5.message : String(e5)}`);
-    return out;
-  }
-  for (const name of names) {
-    const abs = resolve(dir, name);
-    let st;
-    try {
-      st = lstatSync(abs);
-    } catch {
-      continue;
-    }
-    if (st.isSymbolicLink())
-      continue;
-    if (st.isDirectory()) {
-      out.push(...walkMarkdown(abs, errors3));
-    } else if (st.isFile() && name.toLowerCase().endsWith(".md")) {
-      out.push(abs);
-    }
-  }
-  return out;
-}
-function pushFile(files, seen, abs, content, root) {
-  const key = relativeKey(abs, root);
-  if (seen.has(key))
-    return;
-  seen.add(key);
-  files.push({ path: key, content });
-}
-function relativeKey(abs, root) {
-  const rel = abs.startsWith(root) ? abs.slice(root.length) : abs;
-  return rel.replace(/^\/+/, "");
-}
-function safeRead(path2, errors3) {
-  try {
-    return readFileSync2(path2, "utf-8");
-  } catch (e5) {
-    errors3.push(`Failed to read ${path2}: ${e5 instanceof Error ? e5.message : String(e5)}`);
-    return null;
-  }
-}
-function extractMarkdownLinks(md) {
-  const out = [];
-  const re = /\[[^\]]*\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
-  let m;
-  while ((m = re.exec(md)) !== null) {
-    const target = m[1].split("#")[0];
-    if (target)
-      out.push(target);
-  }
-  return out;
-}
-function isExternal(ref) {
-  return /^[a-z][a-z0-9+.-]*:/i.test(ref) || ref.startsWith("//");
-}
-async function fetchAllMemoryFiles(auth) {
-  const all = [];
-  let offset = 0;
-  const limit = 100;
-  for (;; ) {
-    const data = await amikoWebFetch(auth, "/api/memory-files", {
-      query: { limit: String(limit), offset: String(offset) }
-    });
-    all.push(...data.items ?? []);
-    if (!data.has_more || !data.items?.length)
-      break;
-    offset += data.items.length;
-  }
-  return all;
-}
 
 // src/commands/wallets.ts
 function formatBalance(b) {
@@ -31622,7 +31417,6 @@ var friends = program2.command("friends").description("Manage friendships — li
 var users = program2.command("users").description("Search users and view public profiles");
 var post = program2.command("post").description("Create posts and comments on the feed");
 var review = program2.command("review").description("Review queue — list, approve, or reject twin-drafted comments");
-var composio = program2.command("composio").description("Manage Composio app connections");
 var notifications = program2.command("notifications").description("Platform notifications — list, mark as read");
 registerCreditsCommand(program2);
 registerSearchCommand(markets);
@@ -31648,7 +31442,6 @@ registerUsersCommand(users);
 registerFeedCommand(program2);
 registerPostCommand(post);
 registerReviewCommand(review);
-registerComposioCommand(composio);
 registerNotificationsCommand(notifications);
 registerMemoryCommand(program2);
 program2.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.10.1-beta.4",
+  "version": "0.11.0-beta.1",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {

package/skills/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: amiko-cli
-description: The Amiko CLI lets an agent act on the Amiko platform end-to-end — read platform notifications (friend requests, mentions, system alerts), search and write **cross-agent memories** about the owner (what other agents already know — preferences, decisions, facts), manage Solana/Base wallets (create, swap via Jupiter, bridge USDC via Across, transfer tokens to external addresses), top up and spend credits, call paid MPP marketplace services (X/Twitter search, image generation, Amazon product search, TTS/STT, AI chat, SFX/music), manage the twin's identity and drive (files, folders, RAG), voice and avatar, social graph (friends, posts, comments, feed), and Composio OAuth connections. Auth is automatic when run from the agent's workspace folder; payments are platform-custodied (no keys on disk). DMs / chat sessions are NOT in this CLI — use the openhermit gateway's built-in session_list / session_read tools for both local sessions and platform DMs. Use this skill whenever the user asks about their Amiko notifications, drive, memory, social graph, wallets, credits, or marketplace services — anything that would show up in their Amiko account or cost AMIKO/credits.
+description: The Amiko CLI lets an agent act on the Amiko platform end-to-end — read platform notifications (friend requests, mentions, system alerts), search and write **cross-agent memories** about the owner (what other agents already know — preferences, decisions, facts), manage Solana/Base wallets (create, swap via Jupiter, bridge USDC via Across, transfer tokens to external addresses), top up and spend credits, call paid MPP marketplace services (X/Twitter search, image generation, Amazon product search, TTS/STT, AI chat, SFX/music), manage the twin's identity and drive (files, folders, RAG), voice and avatar, and social graph (friends, posts, comments, feed). Auth is automatic when run from the agent's workspace folder; payments are platform-custodied (no keys on disk). DMs / chat sessions are NOT in this CLI — use the openhermit gateway's built-in session_list / session_read tools for both local sessions and platform DMs. Use this skill whenever the user asks about their Amiko notifications, drive, memory, social graph, wallets, credits, or marketplace services — anything that would show up in their Amiko account or cost AMIKO/credits.
 homepage: https://platform.heyamiko.com
 metadata: {"openclaw":{"emoji":"🤖","requires":{"bins":["node"]}}}
 ---
@@ -38,13 +38,13 @@ The CLI is installed globally and is pre-authenticated when you're inside your w
 
 ## Command groups
 
-Discover everything via `amiko --help`. Groups: `markets` (paid MPP services), `wallets`, `credits`, `twin`, `drive` (files / folders / RAG; `docs` is an alias), `voice`, `avatar`, `friends`, `users`, `post`, `review`, `feed`, `composio`, `notifications`, `memory`, plus the top-level `accounts`, `info`, `config`, `update`. All twin-scoped commands accept `--twin <id>`. Most commands support `--json`.
+Discover everything via `amiko --help`. Groups: `markets` (paid MPP services), `wallets`, `credits`, `twin`, `drive` (files / folders / RAG; `docs` is an alias), `voice`, `avatar`, `friends`, `users`, `post`, `review`, `feed`, `notifications`, `memory`, plus the top-level `accounts`, `info`, `config`, `update`. All twin-scoped commands accept `--twin <id>`. Most commands support `--json`.
 
 > **DMs / chat sessions are NOT in this CLI.** Use the openhermit gateway's built-in `session_list` / `session_read` tools for both the agent's local sessions and platform DMs with other users. The previous `amiko conversation` namespace was removed in 0.10.1-beta.4.
 
 ## Critical Rules
 
-1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI refuses to run `markets *`, `credits topup`, `wallets swap send`, `wallets bridge send`, `wallets transfer` (and destructive ops like `twin update --public`, `docs delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `composio disconnect`, `review reject`) unless `--yes` is passed. The refusal prints the cost and the re-run command. **Quote the cost, get explicit approval, THEN append `--yes`.**
+1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI refuses to run `markets *`, `credits topup`, `wallets swap send`, `wallets bridge send`, `wallets transfer` (and destructive ops like `twin update --public`, `drive delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `review reject`) unless `--yes` is passed. The refusal prints the cost and the re-run command. **Quote the cost, get explicit approval, THEN append `--yes`.**
 2. **After every paid command, report the remaining balance.** The CLI prints a `Balance: N credits` line — include that figure in your reply.
 3. **Never retry a failed command.** Report and stop. Every paid call costs tokens even on failure.
 4. **Auth is automatic.** Never suggest `amiko login` / `amiko connect`. Run from the agent's workspace folder; if anything looks off, `amiko accounts` shows the resolved `userId` / `twinId`.
@@ -133,7 +133,7 @@ Memories are scoped to the **owner's `user_id`**, not your agent — every agent
 **Two non-negotiable habits:**
 
 1. **Search before you answer.** Run `amiko memory search "<query>"` **every time** the owner asks anything about themselves, their work, or their history — *before* composing a reply. Another agent may have written a memory you've never seen. A miss costs ~100ms; an amnesic answer costs trust.
-2. **Sync periodically.** Run `amiko memory sync` whenever you've meaningfully edited local `MEMORY.md` / `memory/**/*.md`, and at least once at the end of any session in which they changed.
+2. **Upload changed files.** If you keep memory in local files (e.g. `MEMORY.md`, `memory/*.md`), upload them with `amiko memory upload <file...>` after meaningful edits. The server extracts memories from each file; default path key is the basename. No bulk-walking — pass the exact files you want to push.
 
 ### When to search — bias toward calling
 
@@ -163,10 +163,6 @@ Categories: `fact` | `preference` | `pattern` | `decision` | `context`.
 
 Do NOT save trivial code-derivable facts, ephemeral `git log` state, or duplicates (search first; `rm` near-matches before adding).
 
-## Composio
-
-`composio connect --app <app>` is safe to call as a status check — idempotent, never destroys an existing connection. Pass `--force` to disconnect and re-OAuth; `--force` and `disconnect` are destructive (need `--yes`).
-
 ## Where to run
 
 **Each agent must run `amiko` from inside its own workspace directory.** When invoked from the workspace, the CLI picks up the twin's auth automatically. Run from the wrong folder and you'll act on the wrong twin or fail auth. Before the first call in a session, `cd` into the workspace. `amiko accounts` confirms the resolved scope.