@heyamiko/amiko-cli 0.12.0-beta.4 → 0.12.0-beta.6

package/README.md

@@ -1,4 +1,4 @@
-# @heyamiko/amiko-cli (v0.12.0-beta.4)
+# @heyamiko/amiko-cli (v0.12.0-beta.6)
 
 Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
@@ -221,12 +221,35 @@ amiko chat read @sophie                          # recent messages with a user (
 amiko chat read <conversationId> --limit 40      # by conversation id (from `chat list`) — works for groups too
 amiko chat send @sophie "on my way!" --yes       # send as the owner
 amiko chat send <groupConversationId> "hi all" --yes   # send to a group chat
+amiko chat send @sophie "look 👀" --image ./cat.png --yes         # attach a local image
+amiko chat send @sophie "made this 🎵" --audio <generated-url> --yes  # attach audio (e.g. from `amiko create`)
 ```
 
 - **`<target>`** for `read`/`send` is a **conversation id** (from `chat list` — use this for groups), an **`@handle`**, or a **name** (resolved via user search; if ambiguous, the CLI lists candidates instead of guessing).
 - A DM target that doesn't exist yet is **created automatically** (find-or-create).
+- **Inline media**: `--image <pathOrUrl>` (jpg/png/webp/gif, local ≤10MB or an Amiko URL) and `--audio <pathOrUrl>` (local ≤25MB or an Amiko URL → sent as a voice note). One media block per message (image *or* audio). **Video isn't supported in chat yet.** A local file is uploaded; an Amiko URL (e.g. a generated asset from `amiko create`) attaches directly with no re-upload. (A local *audio* file is sent as a voice note, with your text as a separate message.)
 - `chat send` messages a real person, so it's **gated on `--yes`** in non-interactive shells. Delivery is real-time. `--raw` prints raw JSON on any subcommand.
 
+## Twin Cards
+
+Generate, view, download, and mint your **Twin Card** (template `twins_take`, flavors **work / play / love**).
+
+```bash
+amiko card templates                              # available flavors (DB-managed)
+amiko card create --flavor work                   # generate → prints slug + share link
+amiko card create --flavor love --reroll 1        # a fresh take
+amiko card list                                   # your latest card
+amiko card show <slug>                            # stored card data (JSON)
+amiko card image <slug> --flavor work --out card.png   # download the PNG
+amiko card share <slug>                           # print https://platform.heyamiko.com/s/<slug>
+amiko card mint <slug> --flavor work --yes        # mint as an NFT (gated on --yes)
+amiko card mint <slug> --status                   # check an existing mint
+```
+
+- Flavor defaults to `love`; flavors are DB-managed — `card templates` lists the valid ones.
+- `create` errors are user-fixable and exit with **code 2** (not a crash): `profile_not_ready`, `guardrails_failed`, `rate_limited` (reroll cooldown).
+- `card mint` creates an on-chain NFT → **gated on `--yes`**. All subcommands support `--json`.
+
 ## Amazon
 
 ```bash

package/dist/index.js

@@ -28924,6 +28924,103 @@ More available — raise --limit to see more.`));
   });
 }
 
+// src/lib/file-input.ts
+import { readFile } from "node:fs/promises";
+import { basename, extname } from "node:path";
+var MAX_BYTES = 100 * 1024 * 1024;
+var FETCH_TIMEOUT_MS = 30000;
+async function resolveFileInput(src, opts = {}) {
+  if (src === "-" || opts.stdin) {
+    const buffer2 = await readStdin();
+    const name2 = opts.hintName ?? "stdin";
+    const mime2 = opts.hintMime ?? detectMime(buffer2, name2);
+    return { buffer: buffer2, name: name2, mime: mime2, size: buffer2.length };
+  }
+  if (/^https?:\/\//i.test(src)) {
+    const buffer2 = await fetchRemote(src);
+    const urlPath = new URL(src).pathname;
+    const name2 = opts.hintName ?? (basename(urlPath) || "download");
+    const mime2 = opts.hintMime ?? detectMime(buffer2, name2);
+    return { buffer: buffer2, name: name2, mime: mime2, size: buffer2.length };
+  }
+  const buffer = await readFile(src);
+  if (buffer.length > MAX_BYTES) {
+    throw new Error(`File too large: ${buffer.length} bytes exceeds ${MAX_BYTES} byte cap.`);
+  }
+  const name = opts.hintName ?? basename(src);
+  const mime = opts.hintMime ?? detectMime(buffer, name);
+  return { buffer, name, mime, size: buffer.length };
+}
+async function readStdin() {
+  const chunks = [];
+  let total = 0;
+  for await (const chunk of process.stdin) {
+    const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    total += buf.length;
+    if (total > MAX_BYTES) {
+      throw new Error(`stdin exceeded ${MAX_BYTES} byte cap.`);
+    }
+    chunks.push(buf);
+  }
+  return Buffer.concat(chunks);
+}
+async function fetchRemote(url2) {
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+  try {
+    const res = await fetch(url2, { signal: controller.signal });
+    if (!res.ok) {
+      throw new Error(`Fetch ${url2} failed: ${res.status} ${res.statusText}`);
+    }
+    const len = Number(res.headers.get("content-length") || 0);
+    if (len > MAX_BYTES) {
+      throw new Error(`Remote file too large: ${len} bytes exceeds ${MAX_BYTES} byte cap.`);
+    }
+    const buf = Buffer.from(await res.arrayBuffer());
+    if (buf.length > MAX_BYTES) {
+      throw new Error(`Remote file too large: ${buf.length} bytes exceeds ${MAX_BYTES} byte cap.`);
+    }
+    return buf;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var MAGIC = [
+  [Buffer.from([37, 80, 68, 70]), "application/pdf"],
+  [Buffer.from([137, 80, 78, 71]), "image/png"],
+  [Buffer.from([255, 216, 255]), "image/jpeg"],
+  [Buffer.from([71, 73, 70, 56]), "image/gif"],
+  [Buffer.from([82, 73, 70, 70]), "audio/wav"],
+  [Buffer.from([73, 68, 51]), "audio/mpeg"],
+  [Buffer.from([255, 251]), "audio/mpeg"],
+  [Buffer.from([80, 75, 3, 4]), "application/zip"]
+];
+var EXT_MIME = {
+  ".pdf": "application/pdf",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".txt": "text/plain",
+  ".md": "text/markdown",
+  ".json": "application/json",
+  ".wav": "audio/wav",
+  ".mp3": "audio/mpeg",
+  ".m4a": "audio/mp4",
+  ".ogg": "audio/ogg",
+  ".zip": "application/zip"
+};
+function detectMime(buffer, name) {
+  for (const [sig, mime] of MAGIC) {
+    if (buffer.length >= sig.length && buffer.subarray(0, sig.length).equals(sig)) {
+      return mime;
+    }
+  }
+  const ext = extname(name).toLowerCase();
+  return EXT_MIME[ext] ?? "application/octet-stream";
+}
+
 // src/commands/chat.ts
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function authOrExit() {
@@ -28980,6 +29077,52 @@ async function resolveConversation(auth, target) {
   }
   return findOrCreateDm(auth, users[0].id);
 }
+var HTTPS_RE = /^https:\/\//i;
+var CHAT_IMAGE_MIME = new Set([
+  "image/jpeg",
+  "image/jpg",
+  "image/png",
+  "image/webp",
+  "image/gif"
+]);
+var MAX_CHAT_IMAGE = 10 * 1024 * 1024;
+var MAX_CHAT_AUDIO = 25 * 1024 * 1024;
+function urlName(url2) {
+  try {
+    const p = new URL(url2).pathname.split("/").pop();
+    return p && p.length ? decodeURIComponent(p) : "attachment";
+  } catch {
+    return "attachment";
+  }
+}
+async function uploadChatImage(auth, convId, path2) {
+  const f = await resolveFileInput(path2);
+  if (!CHAT_IMAGE_MIME.has(f.mime)) {
+    throw new Error(`"${path2}" is not a supported image (detected ${f.mime}). Allowed: JPEG, PNG, WebP, GIF.`);
+  }
+  if (f.size > MAX_CHAT_IMAGE) {
+    throw new Error(`"${path2}" exceeds the 10MB chat image limit.`);
+  }
+  const form = new FormData;
+  form.set("file", new Blob([new Uint8Array(f.buffer)], { type: f.mime }), f.name);
+  const data = await amikoWebFetch(auth, `/api/conversations/${encodeURIComponent(convId)}/images/upload`, { method: "POST", multipart: form, timeoutMs: 60000 });
+  if (!data.image?.url)
+    throw new Error("Image upload returned no URL.");
+  return { url: data.image.url, name: data.image.name ?? f.name };
+}
+async function uploadChatVoice(auth, convId, path2) {
+  const f = await resolveFileInput(path2);
+  if (!f.mime.startsWith("audio/")) {
+    throw new Error(`"${path2}" is not an audio file (detected ${f.mime}).`);
+  }
+  if (f.size > MAX_CHAT_AUDIO) {
+    throw new Error(`"${path2}" exceeds the 25MB chat audio limit.`);
+  }
+  const form = new FormData;
+  form.set("audio", new Blob([new Uint8Array(f.buffer)], { type: f.mime }), f.name);
+  form.set("duration", "0");
+  await amikoWebFetch(auth, `/api/conversations/${encodeURIComponent(convId)}/audio/upload`, { method: "POST", multipart: form, timeoutMs: 120000 });
+}
 function registerChatCommand(chat) {
   chat.command("list").description("List your conversations (DMs and group chats)").option("--limit <n>", "Max conversations", "30").option("--archived", "Include archived conversations").option("--raw", "Output raw JSON").action(async (opts) => {
     const auth = authOrExit();
@@ -29054,8 +29197,12 @@ function registerChatCommand(chat) {
         console.log(dim(`  ${when}`));
     }
   });
-  chat.command("send <target> <message>").description("Send a message as yourself (the owner) to a conversation (id, @handle, or name)").option("--yes", "Skip the confirmation (required in non-interactive shells)").option("--raw", "Output raw JSON").action(async (target, message, opts) => {
+  chat.command("send <target> <message>").description("Send a message as yourself (the owner) to a conversation (id, @handle, or name)").option("--image <pathOrUrl>", "Attach an image: local file (jpg/png/webp/gif, ≤10MB) or an Amiko URL (e.g. from `amiko create`)").option("--audio <pathOrUrl>", "Attach audio as a voice note: local file (≤25MB) or an Amiko URL").option("--yes", "Skip the confirmation (required in non-interactive shells)").option("--raw", "Output raw JSON").action(async (target, message, opts) => {
     const auth = authOrExit();
+    if (opts.image && opts.audio) {
+      console.error(error("Attach either --image or --audio, not both (one media block per message)."));
+      process.exit(1);
+    }
     let convId;
     try {
       convId = await resolveConversation(auth, target);
@@ -29063,15 +29210,38 @@ function registerChatCommand(chat) {
       console.error(error(e5 instanceof Error ? e5.message : "Could not resolve target"));
       process.exit(1);
     }
+    const media = opts.image ? `image ${opts.image}` : opts.audio ? `audio ${opts.audio}` : "";
     await requireApproval({
       cost: "no charge — sends a message as you (the owner)",
-      summary: `Send to ${target}: ${message.slice(0, 80)}${message.length > 80 ? "…" : ""}`,
+      summary: `Send to ${target}${media ? ` [+${media}]` : ""}: ${message.slice(0, 80)}${message.length > 80 ? "…" : ""}`,
       yes: opts.yes,
       commandExample: `amiko chat send ${JSON.stringify(target)} ${JSON.stringify(message)}`
     });
+    const messagesPath = `/api/conversations/${encodeURIComponent(convId)}/messages`;
+    const post = (body) => amikoWebFetch(auth, messagesPath, {
+      method: "POST",
+      body,
+      timeoutMs: 20000
+    });
     let data;
     try {
-      data = await amikoWebFetch(auth, `/api/conversations/${encodeURIComponent(convId)}/messages`, { method: "POST", body: { content: message }, timeoutMs: 20000 });
+      if (opts.image) {
+        const img = HTTPS_RE.test(opts.image) ? { url: opts.image, name: urlName(opts.image) } : await uploadChatImage(auth, convId, opts.image);
+        data = await post({ content: message, metadata: { images: [img] } });
+      } else if (opts.audio) {
+        if (HTTPS_RE.test(opts.audio)) {
+          data = await post({
+            content: message,
+            message_type: "voice",
+            metadata: { audioUrl: opts.audio }
+          });
+        } else {
+          data = await post({ content: message });
+          await uploadChatVoice(auth, convId, opts.audio);
+        }
+      } else {
+        data = await post({ content: message });
+      }
     } catch (e5) {
       console.error(error(e5 instanceof Error ? e5.message : "Send failed"));
       process.exit(1);
@@ -29080,7 +29250,220 @@ function registerChatCommand(chat) {
       console.log(JSON.stringify(data, null, 2));
       return;
     }
-    console.log(success("Message sent") + dim(` (conversation ${convId.slice(0, 8)}…)`));
+    const what = opts.image ? "Message + image sent" : opts.audio ? "Message + voice note sent" : "Message sent";
+    console.log(success(what) + dim(` (conversation ${convId.slice(0, 8)}…)`));
+  });
+}
+
+// src/commands/card.ts
+import { writeFile } from "node:fs/promises";
+var TEMPLATE_ID = "twins_take";
+var DEFAULT_FLAVOR = "love";
+function authOrExit2() {
+  try {
+    return requireAuth();
+  } catch (e5) {
+    console.error(error(e5 instanceof Error ? e5.message : "auth failed"));
+    process.exit(1);
+  }
+}
+function platformBase(auth) {
+  return (auth.platformUrl ?? "https://platform.heyamiko.com").replace(/\/$/, "");
+}
+function cardErrorExit(e5) {
+  const err = e5;
+  let body = {};
+  try {
+    body = JSON.parse(err?.body ?? "{}");
+  } catch {}
+  const code = body.error ?? "";
+  const map2 = {
+    profile_not_ready: {
+      msg: "Your Amiko profile isn't complete enough to generate a card yet — flesh out your profile first.",
+      exit: 2
+    },
+    guardrails_failed: {
+      msg: "Content guardrails didn't pass — try again, or a different --flavor.",
+      exit: 2
+    },
+    rate_limited: {
+      msg: `Card generation is rate-limited right now — try again later${body.retry_after_seconds ? ` (~${body.retry_after_seconds}s)` : ""}.`,
+      exit: 2
+    },
+    unknown_flavor: {
+      msg: "Unknown flavor. Run `amiko card templates` to see the valid flavors.",
+      exit: 1
+    },
+    unknown_template: { msg: "Only the twins_take card can be generated.", exit: 1 },
+    template_not_generatable: {
+      msg: "Only the twins_take card can be generated.",
+      exit: 1
+    }
+  };
+  const hit = map2[code];
+  if (hit) {
+    console.error(error(hit.msg));
+    process.exit(hit.exit);
+  }
+  console.error(error(e5 instanceof Error ? e5.message : "Card request failed"));
+  process.exit(1);
+}
+function registerCardCommand(card) {
+  card.command("templates").description("List the available card flavors (work / play / love)").option("--json", "Output raw JSON").action(async (opts) => {
+    const auth = authOrExit2();
+    let data;
+    try {
+      data = await amikoWebFetch(auth, "/api/twin-cards/templates", {
+        timeoutMs: 15000
+      });
+    } catch (e5) {
+      cardErrorExit(e5);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(data, null, 2));
+      return;
+    }
+    const flavors = data.templates ?? [];
+    if (flavors.length === 0) {
+      console.log(dim("No flavors available."));
+      return;
+    }
+    console.log(heading(`Card flavors (${flavors.length})
+`));
+    for (const f of flavors)
+      console.log(label(f.key, f.name ?? ""));
+  });
+  card.command("list").description("Show your most recently generated card").option("--json", "Output raw JSON").action(async (opts) => {
+    const auth = authOrExit2();
+    let data;
+    try {
+      data = await amikoWebFetch(auth, "/api/twin-cards/me", {
+        timeoutMs: 15000
+      });
+    } catch (e5) {
+      cardErrorExit(e5);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(data, null, 2));
+      return;
+    }
+    if (!data.slug) {
+      console.log(dim("No card yet — generate one with `amiko card create`."));
+      return;
+    }
+    console.log(heading(`Your latest card
+`));
+    console.log(label("Slug", data.slug));
+    console.log(label("Flavors", Object.keys(data.cards ?? {}).join(", ") || "-"));
+    if (data.generated_at)
+      console.log(label("Generated", data.generated_at));
+    console.log(label("Share", `${platformBase(auth)}/s/${data.slug}`));
+  });
+  card.command("create").description("Generate (or reroll) your Twin Card").option("--flavor <flavor>", "Flavor: work, play, love (DB-managed; see `card templates`)", DEFAULT_FLAVOR).option("--reroll <n>", "Reroll number (≥0) for a fresh take", "0").option("--json", "Output raw JSON").action(async (opts) => {
+    const auth = authOrExit2();
+    let data;
+    try {
+      data = await amikoWebFetch(auth, "/api/share/generate-card", {
+        method: "POST",
+        body: {
+          template_id: TEMPLATE_ID,
+          flavor: opts.flavor,
+          reroll_number: Math.max(0, Math.floor(Number(opts.reroll) || 0))
+        },
+        timeoutMs: 120000
+      });
+    } catch (e5) {
+      cardErrorExit(e5);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(data, null, 2));
+      return;
+    }
+    console.log(heading(`${opts.flavor} card ready
+`));
+    if (data.slug) {
+      console.log(label("Slug", data.slug));
+      console.log(label("Share", `${platformBase(auth)}/s/${data.slug}`));
+      console.log(dim(`Image: amiko card image ${data.slug} --flavor ${opts.flavor}`));
+    }
+  });
+  card.command("show <slug>").description("Read a card's stored data").option("--json", "Output raw JSON").action(async (slug, opts) => {
+    const auth = authOrExit2();
+    let data;
+    try {
+      data = await amikoWebFetch(auth, `/api/share/${encodeURIComponent(slug)}`, { timeoutMs: 15000 });
+    } catch (e5) {
+      cardErrorExit(e5);
+    }
+    console.log(JSON.stringify(data, null, 2));
+  });
+  card.command("image <slug>").description("Download the card image (PNG)").option("--flavor <flavor>", "Flavor: work, play, love", DEFAULT_FLAVOR).option("--out <path>", "Output file (default: card-<slug>-<flavor>.png)").action(async (slug, opts) => {
+    const auth = authOrExit2();
+    const url2 = `${platformBase(auth)}/api/share/${encodeURIComponent(slug)}/image?flavor=${encodeURIComponent(opts.flavor)}`;
+    let buf;
+    try {
+      const res = await fetch(url2, {
+        headers: { Authorization: `Bearer ${auth.twinToken ?? ""}` },
+        signal: AbortSignal.timeout(60000)
+      });
+      if (!res.ok) {
+        console.error(error(`Failed to fetch card image: ${res.status} ${res.statusText}`));
+        process.exit(1);
+      }
+      buf = Buffer.from(await res.arrayBuffer());
+    } catch (e5) {
+      console.error(error(e5 instanceof Error ? e5.message : "Image download failed"));
+      process.exit(1);
+    }
+    const out = opts.out ?? `card-${slug}-${opts.flavor}.png`;
+    await writeFile(out, buf);
+    console.log(success(`Saved ${buf.length.toLocaleString()} bytes → ${out}`));
+  });
+  card.command("mint <slug>").description("Mint a card as an NFT (or --status to check an existing mint)").option("--flavor <flavor>", "Flavor: work, play, love", DEFAULT_FLAVOR).option("--name <name>", "NFT name (optional)").option("--description <desc>", "NFT description (optional)").option("--status", "Check mint status instead of minting").option("--yes", "Skip the confirmation (required in non-interactive shells)").option("--json", "Output raw JSON").action(async (slug, opts) => {
+    const auth = authOrExit2();
+    if (opts.status) {
+      let data2;
+      try {
+        data2 = await amikoWebFetch(auth, `/api/share/twin-cards/mint?slug=${encodeURIComponent(slug)}`, { timeoutMs: 15000 });
+      } catch (e5) {
+        cardErrorExit(e5);
+      }
+      console.log(JSON.stringify(data2, null, 2));
+      return;
+    }
+    await requireApproval({
+      cost: "mints an on-chain NFT (cNFT) from your twin card",
+      summary: `Mint ${opts.flavor} card ${slug} as an NFT`,
+      yes: opts.yes,
+      commandExample: `amiko card mint ${slug} --flavor ${opts.flavor}`
+    });
+    let data;
+    try {
+      data = await amikoWebFetch(auth, "/api/share/twin-cards/mint", {
+        method: "POST",
+        body: {
+          slug,
+          flavor: opts.flavor,
+          ...opts.name ? { name: opts.name } : {},
+          ...opts.description ? { description: opts.description } : {}
+        },
+        timeoutMs: 120000
+      });
+    } catch (e5) {
+      cardErrorExit(e5);
+    }
+    if (opts.json) {
+      console.log(JSON.stringify(data, null, 2));
+      return;
+    }
+    console.log(success(`Mint ${data.status ?? "submitted"}`));
+    if (data.mint_address)
+      console.log(label("Mint", data.mint_address));
+    console.log(dim(`Check status: amiko card mint ${slug} --status`));
+  });
+  card.command("share <slug>").description("Print the public share link for a card").action(async (slug) => {
+    const auth = authOrExit2();
+    console.log(`${platformBase(auth)}/s/${slug}`);
   });
 }
 
@@ -29632,107 +30015,8 @@ function registerTwinCommand(program2) {
 }
 
 // src/commands/drive.ts
-import { writeFile } from "node:fs/promises";
+import { writeFile as writeFile2 } from "node:fs/promises";
 import { basename as basename2, resolve as resolvePath } from "node:path";
-
-// src/lib/file-input.ts
-import { readFile } from "node:fs/promises";
-import { basename, extname } from "node:path";
-var MAX_BYTES = 100 * 1024 * 1024;
-var FETCH_TIMEOUT_MS = 30000;
-async function resolveFileInput(src, opts = {}) {
-  if (src === "-" || opts.stdin) {
-    const buffer2 = await readStdin();
-    const name2 = opts.hintName ?? "stdin";
-    const mime2 = opts.hintMime ?? detectMime(buffer2, name2);
-    return { buffer: buffer2, name: name2, mime: mime2, size: buffer2.length };
-  }
-  if (/^https?:\/\//i.test(src)) {
-    const buffer2 = await fetchRemote(src);
-    const urlPath = new URL(src).pathname;
-    const name2 = opts.hintName ?? (basename(urlPath) || "download");
-    const mime2 = opts.hintMime ?? detectMime(buffer2, name2);
-    return { buffer: buffer2, name: name2, mime: mime2, size: buffer2.length };
-  }
-  const buffer = await readFile(src);
-  if (buffer.length > MAX_BYTES) {
-    throw new Error(`File too large: ${buffer.length} bytes exceeds ${MAX_BYTES} byte cap.`);
-  }
-  const name = opts.hintName ?? basename(src);
-  const mime = opts.hintMime ?? detectMime(buffer, name);
-  return { buffer, name, mime, size: buffer.length };
-}
-async function readStdin() {
-  const chunks = [];
-  let total = 0;
-  for await (const chunk of process.stdin) {
-    const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    total += buf.length;
-    if (total > MAX_BYTES) {
-      throw new Error(`stdin exceeded ${MAX_BYTES} byte cap.`);
-    }
-    chunks.push(buf);
-  }
-  return Buffer.concat(chunks);
-}
-async function fetchRemote(url2) {
-  const controller = new AbortController;
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const res = await fetch(url2, { signal: controller.signal });
-    if (!res.ok) {
-      throw new Error(`Fetch ${url2} failed: ${res.status} ${res.statusText}`);
-    }
-    const len = Number(res.headers.get("content-length") || 0);
-    if (len > MAX_BYTES) {
-      throw new Error(`Remote file too large: ${len} bytes exceeds ${MAX_BYTES} byte cap.`);
-    }
-    const buf = Buffer.from(await res.arrayBuffer());
-    if (buf.length > MAX_BYTES) {
-      throw new Error(`Remote file too large: ${buf.length} bytes exceeds ${MAX_BYTES} byte cap.`);
-    }
-    return buf;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-var MAGIC = [
-  [Buffer.from([37, 80, 68, 70]), "application/pdf"],
-  [Buffer.from([137, 80, 78, 71]), "image/png"],
-  [Buffer.from([255, 216, 255]), "image/jpeg"],
-  [Buffer.from([71, 73, 70, 56]), "image/gif"],
-  [Buffer.from([82, 73, 70, 70]), "audio/wav"],
-  [Buffer.from([73, 68, 51]), "audio/mpeg"],
-  [Buffer.from([255, 251]), "audio/mpeg"],
-  [Buffer.from([80, 75, 3, 4]), "application/zip"]
-];
-var EXT_MIME = {
-  ".pdf": "application/pdf",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".txt": "text/plain",
-  ".md": "text/markdown",
-  ".json": "application/json",
-  ".wav": "audio/wav",
-  ".mp3": "audio/mpeg",
-  ".m4a": "audio/mp4",
-  ".ogg": "audio/ogg",
-  ".zip": "application/zip"
-};
-function detectMime(buffer, name) {
-  for (const [sig, mime] of MAGIC) {
-    if (buffer.length >= sig.length && buffer.subarray(0, sig.length).equals(sig)) {
-      return mime;
-    }
-  }
-  const ext = extname(name).toLowerCase();
-  return EXT_MIME[ext] ?? "application/octet-stream";
-}
-
-// src/commands/drive.ts
 function fmtBytes(n) {
   if (!n || n <= 0)
     return "-";
@@ -29944,7 +30228,7 @@ Search hits filename, title, description, and parsed RAG content (once processed
         return;
       }
       const outPath = resolvePath(opts.out ?? basename2(meta3.doc.filename));
-      await writeFile(outPath, buf);
+      await writeFile2(outPath, buf);
       spinner?.stop();
       console.log(success(`Saved ${meta3.doc.filename} → ${outPath}`));
       console.log(label("Size", fmtBytes(buf.length)));
@@ -31967,6 +32251,7 @@ program2.name("amiko").description("Amiko CLI — swap tokens, manage credits, b
 var markets = program2.command("markets").description("MPP marketplace — discover and call paid AMIKO services");
 var create2 = program2.command("create").description("Create Studio — generate images, video, speech, music, and SFX (charged on success)");
 var chat = program2.command("chat").description("Your conversations (DMs + group chats) as the owner — list, read, send");
+var card = program2.command("card").description("Twin Cards (work/play/love) — generate, view, download, mint");
 var wallets = program2.command("wallets").description("Manage twin wallets — list, swap, bridge");
 var twin = program2.command("twin").description("Update twin identity (name, description, visibility)");
 var drive = program2.command("drive").alias("docs").description("Manage twin drive — upload/download/search files, organise into folders");
@@ -31982,6 +32267,7 @@ registerSearchCommand(markets);
 registerImageCommand(markets);
 registerCreateCommand(create2);
 registerChatCommand(chat);
+registerCardCommand(card);
 registerAmazonCommand(markets);
 registerWalletsCreateCommand(wallets);
 registerWalletsListCommand(wallets);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.12.0-beta.4",
+  "version": "0.12.0-beta.6",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {

package/skills/SKILL.md

@@ -41,13 +41,13 @@ The CLI is installed globally and is pre-authenticated when you're inside your w
 
 ## Command groups
 
-Discover everything via `amiko --help`. Groups: `markets` (paid MPP services), `create` (Create Studio — async media generation, charged on success), `chat` (owner's DMs + group chats), `wallets`, `credits`, `twin`, `drive` (files / folders / RAG; `docs` is an alias), `voice`, `avatar`, `friends`, `users`, `post`, `review`, `feed`, `notifications`, `memory`, plus the top-level `accounts`, `info`, `config`, `update`. All twin-scoped commands accept `--twin <id>`. Most commands support `--json`.
+Discover everything via `amiko --help`. Groups: `markets` (paid MPP services), `create` (Create Studio — async media generation, charged on success), `chat` (owner's DMs + group chats), `card` (Twin Cards — work/play/love), `wallets`, `credits`, `twin`, `drive` (files / folders / RAG; `docs` is an alias), `voice`, `avatar`, `friends`, `users`, `post`, `review`, `feed`, `notifications`, `memory`, plus the top-level `accounts`, `info`, `config`, `update`. All twin-scoped commands accept `--twin <id>`. Most commands support `--json`.
 
 > **Two chat surfaces — pick by identity.** `amiko chat` is the **owner's** DMs and group chats, acting **as the owner** (list / read / send). The openhermit gateway's `session_list` / `session_send` are the **agent's own** sessions, acting **as the agent**. "Send a message to Sophie for me" → `amiko chat send`; "have the twin reply as itself" → gateway. (The old `amiko conversation` namespace was removed in 0.10.1-beta.4; `amiko chat` is its owner-identity replacement.)
 
 ## Critical Rules
 
-1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI refuses to run `markets *`, `create *`, `chat send`, `credits topup`, `wallets swap send`, `wallets bridge send`, `wallets transfer` (and destructive ops like `twin update --public`, `drive delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `review reject`) unless `--yes` is passed. The refusal prints the cost and the re-run command. **Quote the cost, get explicit approval, THEN append `--yes`.**
+1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI refuses to run `markets *`, `create *`, `chat send`, `card mint`, `credits topup`, `wallets swap send`, `wallets bridge send`, `wallets transfer` (and destructive ops like `twin update --public`, `drive delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `review reject`) unless `--yes` is passed. The refusal prints the cost and the re-run command. **Quote the cost, get explicit approval, THEN append `--yes`.**
 2. **After every paid command, report the remaining balance.** The CLI prints a `Balance: N credits` line — include that figure in your reply.
 3. **Never retry a failed command.** Report and stop. Every paid call costs tokens even on failure.
 4. **Auth is automatic.** Never suggest `amiko login` / `amiko connect`. Run from the agent's workspace folder; if anything looks off, `amiko accounts` shows the resolved `userId` / `twinId`.
@@ -103,8 +103,18 @@ All paid markets commands auto-select the twin's active Solana wallet (see `--wa
 - `amiko chat list` — all conversations, **DMs and group chats** (id, type, peer/title, last message, unread).
 - `amiko chat read <target>` — recent messages. `<target>` = a conversation id (from `list`), an `@handle`, or a name.
 - `amiko chat send <target> "message"` — send **as the owner**. Delivered in real time. `--yes` required in non-interactive shells (it's an outward message to a real person). For **group chats**, use the conversation id from `list`; for a **DM**, an `@handle`/name resolves + finds-or-creates the DM.
+- **Inline media**: `--image <pathOrUrl>` (jpg/png/webp/gif, local ≤10MB or an Amiko URL — e.g. a generated image) and `--audio <pathOrUrl>` (local ≤25MB or an Amiko URL → sent as a voice note). One media block per message (image XOR audio). **Video is not supported** on chat yet. To share a generated asset, pass its URL from `amiko create status` (no re-upload). A local audio file is sent as a voice note with the text as a separate message.
 - Name resolution goes through user search; if ambiguous it lists candidates — don't blind-send. Server enforces who you're allowed to message (friend/participant rules); surface its error, don't retry.
 
+## Card — behavior notes
+
+`amiko card` = the owner's **Twin Card** (shareable card, template `twins_take`, flavors **work / play / love** — DB-managed, discover with `card templates`).
+
+- `card create --flavor <work|play|love> [--reroll <n>]` — generate/reroll; returns a slug + share link (`/s/<slug>`). Flavor defaults to `love`. Errors are user-fixable and exit **non-zero code 2** (don't treat as a crash): `profile_not_ready` (complete the profile first), `guardrails_failed` (retry / other flavor), `rate_limited` (reroll cooldown — try later).
+- `card list` — your latest card; `card show <slug>` — its data; `card image <slug> --flavor <f> [--out <path>]` — download the PNG; `card share <slug>` — print the public link.
+- `card mint <slug> --flavor <f>` — mint as an on-chain NFT → **`--yes` gated**. `card mint <slug> --status` checks an existing mint.
+- All `--json`. Auth is the injected twin token (same as `post`/`create`); no login.
+
 ## Drive (files & folders)
 
 The drive is **shared between the user and the agent** — anything either side uploads is visible to both. Uploads kick off an async RAG-parsing job (~seconds to minutes); list/search/rename/move/delete all work regardless of parsing status. `drive search` and `drive list --search` hit filename, title, description, and the parsed content body (once parsing completes). Prefer reading parsed content via the agent workspace sync over polling `drive status` from long-running tasks. `amiko docs` is kept as an alias for backward compat.