@heyamiko/amiko-cli 0.8.0 → 0.8.1

package/README.md

@@ -1,4 +1,4 @@
-# @heyamiko/amiko-cli (v0.8.0)
+# @heyamiko/amiko-cli (v0.8.1)
 
 Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed, Composio apps) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
@@ -148,19 +148,20 @@ amiko swap send 0.5 USDC AMIKO --yes
 amiko swap send 100 AMIKO SOL --slippage 100
 ```
 
-Swaps execute via Jupiter on Solana. Supports SOL, USDC, USDT, AMIKO, PYUSD, BONK, JUP, RAY, JitoSOL, mSOL, or any mint address.
+Swaps execute via Jupiter on Solana. Supports SOL, USDC, USDT, AMIKO, PYUSD, BONK, JUP, RAY, JitoSOL, mSOL, or any mint address. `swap send` is hard-gated: in a non-interactive shell you must pass `--yes` after quoting the cost to the user (`Solana gas + 10bps platform fee`).
 
 ## Bridge
 
 ```bash
 amiko bridge quote <amount>              # cross-chain USDC quote via Across Protocol
-amiko bridge send <amount>               # execute bridge transfer
+amiko bridge send <amount>               # execute bridge transfer (gated — requires --yes in non-TTY)
+amiko bridge send <amount> --raw         # print transaction JSON without sending (no gate)
 amiko bridge status <txHash>             # check bridge status
 amiko bridge routes                      # available bridge routes
 amiko bridge limits                      # min/max limits per route
 ```
 
-Default route: Solana → Tempo. Use `--from` and `--to` flags for other chains.
+Default route: Solana → Tempo. Use `--from` and `--to` flags for other chains. Like `swap send`, `bridge send` refuses to run in a non-interactive shell without `--yes` so agents must quote the Across fee + gas to the user before executing.
 
 ## MPP Services
 
@@ -191,7 +192,7 @@ Audio and image endpoints upload to Supabase Storage and return permanent URLs.
 
 ## Confirmation Gate for Paid Commands
 
-Every paid command (`image`, `search`, `amazon search`, `service tts`, `service stt`, `service chat`, `service call`, `credits topup`) requires explicit approval before spending:
+Every paid / value-moving command (`image`, `search`, `amazon search`, `service tts`, `service stt`, `service chat`, `service call`, `credits topup`, `swap send`, `bridge send`) requires explicit approval before spending:
 
 - **Human, interactive shell** — the command prints the cost and prompts `Proceed? [y/N]`. Answer `y` to run.
 - **Agent / non-interactive shell** — the command *refuses* to run without `--yes`, with a message telling the agent what to do:
@@ -206,7 +207,7 @@ Every paid command (`image`, `search`, `amazon search`, `service tts`, `service
     amiko image "a sunset over mountains" --yes
   ```
 
-This makes cost confirmation effectively mandatory regardless of which model drives the agent — weak models can no longer silently burn tokens by ignoring the skill docs.
+This makes cost confirmation effectively mandatory regardless of which model drives the agent — weak models can no longer silently burn tokens by ignoring the skill docs. The same refusal fires for `swap send` (Solana gas + 10 bps platform fee) and `bridge send` (Across fee + gas), so an agent cannot move tokens without a round-trip through user approval.
 
 ## Error Output
 

package/dist/index.js

@@ -73750,6 +73750,69 @@ Run "amiko login" again to re-authenticate, or "amiko logout" to sign out.
   });
 }
 
+// src/lib/confirm.ts
+import readline from "node:readline";
+function promptYesNo(question) {
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+  return new Promise((resolve2) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve2(/^y(es)?$/i.test(answer.trim()));
+    });
+  });
+}
+async function confirmDestructive(args) {
+  if (args.yes)
+    return;
+  if (process.stdin.isTTY) {
+    console.log("");
+    console.log(warn(args.action));
+    if (args.detail)
+      console.log(dim(args.detail));
+    const ok = await promptYesNo("Proceed? [y/N] ");
+    if (!ok) {
+      console.log(dim("Cancelled."));
+      process.exit(0);
+    }
+    return;
+  }
+  console.error(error(`Refusing to run without --yes (non-interactive shell).`));
+  console.error("");
+  console.error(`Action: ${args.action}`);
+  if (args.detail)
+    console.error(dim(args.detail));
+  console.error("");
+  console.error(dim("Re-run with --yes to confirm:"));
+  console.error(dim(`  ${args.commandExample} --yes`));
+  process.exit(2);
+}
+async function requireApproval(args) {
+  if (args.yes)
+    return;
+  if (process.stdin.isTTY) {
+    console.log("");
+    console.log(`About to run: ${args.summary}`);
+    console.log(`Cost: ${args.cost}`);
+    const ok = await promptYesNo("Proceed? [y/N] ");
+    if (!ok) {
+      console.log(dim("Cancelled."));
+      process.exit(0);
+    }
+    return;
+  }
+  console.error(error(`Refusing to run without --yes (non-interactive shell detected).`));
+  console.error("");
+  console.error(`This command will cost ${args.cost}.`);
+  console.error(`Action: ${args.summary}`);
+  console.error("");
+  console.error(dim(`Quote the cost to the user, get their explicit approval, then re-run with --yes:`));
+  console.error(dim(`  ${args.commandExample} --yes`));
+  process.exit(2);
+}
+
 // src/lib/across.ts
 function getBridgeBase() {
   const config = loadConfig();
@@ -73969,7 +74032,7 @@ function registerBridgeCommand(program2) {
       process.exit(1);
     }
   });
-  cmd.command("send").description("Execute a USDC bridge transfer via Across").argument("<amount>", "Amount of USDC to bridge (e.g., 10, 5.50)").option("--from <chain>", "Origin chain (default: solana)", "solana").option("--to <chain>", "Destination chain (default: tempo)", "tempo").option("--recipient <address>", "Recipient address on destination chain").option("--depositor <address>", "Depositor address on origin chain").option("--raw", "Output raw transaction JSON for manual signing").action(async (amountStr, opts) => {
+  cmd.command("send").description("Execute a USDC bridge transfer via Across").argument("<amount>", "Amount of USDC to bridge (e.g., 10, 5.50)").option("--from <chain>", "Origin chain (default: solana)", "solana").option("--to <chain>", "Destination chain (default: tempo)", "tempo").option("--recipient <address>", "Recipient address on destination chain").option("--depositor <address>", "Depositor address on origin chain").option("--raw", "Output raw transaction JSON for manual signing").option("--yes", "Skip confirmation (only after the user has approved)").action(async (amountStr, opts) => {
     const spinner = ora("Preparing bridge transaction...").start();
     try {
       const originChainId = resolveChainId(opts.from);
@@ -74009,6 +74072,14 @@ function registerBridgeCommand(program2) {
       if (quote.fees?.total) {
         console.log(label("Fee", `${formatUsdcAmount(quote.fees.total.amount)} USDC`));
       }
+      if (!opts.raw) {
+        await requireApproval({
+          cost: quote.fees?.total ? `${formatUsdcAmount(quote.fees.total.amount)} USDC bridge fee + gas` : "gas + Across fee",
+          summary: `bridge ${formatUsdcAmount(quote.inputAmount)} USDC ${originName} → ${destName}`,
+          yes: opts.yes,
+          commandExample: `amiko bridge send ${amountStr} --from ${opts.from} --to ${opts.to}`
+        });
+      }
       if (opts.raw) {
         console.log("");
         console.log(heading("Transaction Data"));
@@ -74412,7 +74483,7 @@ Tip: you can also generate a connect link from your Amiko settings`));
 }
 
 // src/commands/credits.ts
-import readline from "node:readline";
+import readline2 from "node:readline";
 
 // src/lib/mpp-topup.ts
 async function mppCreditsTopup(params) {
@@ -74475,11 +74546,11 @@ async function mppCreditsTopup(params) {
 }
 
 // src/commands/credits.ts
-function promptYesNo(question) {
+function promptYesNo2(question) {
   if (!process.stdin.isTTY) {
     return Promise.resolve(false);
   }
-  const rl = readline.createInterface({
+  const rl = readline2.createInterface({
     input: process.stdin,
     output: process.stdout
   });
@@ -74717,7 +74788,7 @@ function registerCreditsCommand(program2) {
           console.log(label("USD", `$${usdAmount.toFixed(2)}`));
           console.log(dim("Charged via MPP connected key."));
           console.log("");
-          const ok = await promptYesNo("Proceed? [y/N] ");
+          const ok = await promptYesNo2("Proceed? [y/N] ");
           if (!ok) {
             console.log(dim("Top-up cancelled."));
             process.exit(0);
@@ -74761,7 +74832,7 @@ function registerCreditsCommand(program2) {
       console.log(dim("Tokens will be transferred from your agent wallet to the treasury."));
       console.log("");
       if (!options.yes) {
-        const confirmed = await promptYesNo("Proceed? [y/N] ");
+        const confirmed = await promptYesNo2("Proceed? [y/N] ");
         if (!confirmed) {
           console.log(dim("Top-up cancelled."));
           process.exit(0);
@@ -75006,20 +75077,12 @@ function registerSwapCommand(program2) {
         console.log(label("Route", dim(route)));
       console.log(label("Wallet", truncAddr(wallet)));
       console.log("");
-      const isInteractive2 = process.stdin.isTTY && !opts.yes;
-      if (isInteractive2) {
-        const readline2 = await import("readline");
-        const rl = readline2.createInterface({
-          input: process.stdin,
-          output: process.stdout
-        });
-        const answer = await new Promise((resolve2) => rl.question("Confirm swap? (y/N) ", resolve2));
-        rl.close();
-        if (answer.toLowerCase() !== "y") {
-          console.log(dim("Cancelled."));
-          process.exit(0);
-        }
-      }
+      await requireApproval({
+        cost: "Solana gas + 10bps platform fee",
+        summary: `swap ${amountStr} ${fromToken.toUpperCase()} → ~${(Number(quote.outAmount) / 10 ** output.decimals).toFixed(6)} ${output.symbol}`,
+        yes: opts.yes,
+        commandExample: `amiko swap send ${amountStr} ${fromToken} ${toToken}`
+      });
       const swapSpinner = ora("Executing swap via Crossmint...").start();
       const billingToken = auth.platformKey || auth.twinToken || auth.privyToken;
       const billingBase = auth.billingBase || "https://billing.heyamiko.com";
@@ -75236,69 +75299,6 @@ async function reportHttpError(res, label2) {
   console.error(String(pretty).slice(0, 2000));
 }
 
-// src/lib/confirm.ts
-import readline2 from "node:readline";
-function promptYesNo2(question) {
-  const rl = readline2.createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  return new Promise((resolve2) => {
-    rl.question(question, (answer) => {
-      rl.close();
-      resolve2(/^y(es)?$/i.test(answer.trim()));
-    });
-  });
-}
-async function confirmDestructive(args) {
-  if (args.yes)
-    return;
-  if (process.stdin.isTTY) {
-    console.log("");
-    console.log(warn(args.action));
-    if (args.detail)
-      console.log(dim(args.detail));
-    const ok = await promptYesNo2("Proceed? [y/N] ");
-    if (!ok) {
-      console.log(dim("Cancelled."));
-      process.exit(0);
-    }
-    return;
-  }
-  console.error(error(`Refusing to run without --yes (non-interactive shell).`));
-  console.error("");
-  console.error(`Action: ${args.action}`);
-  if (args.detail)
-    console.error(dim(args.detail));
-  console.error("");
-  console.error(dim("Re-run with --yes to confirm:"));
-  console.error(dim(`  ${args.commandExample} --yes`));
-  process.exit(2);
-}
-async function requireApproval(args) {
-  if (args.yes)
-    return;
-  if (process.stdin.isTTY) {
-    console.log("");
-    console.log(`About to run: ${args.summary}`);
-    console.log(`Cost: ${args.cost}`);
-    const ok = await promptYesNo2("Proceed? [y/N] ");
-    if (!ok) {
-      console.log(dim("Cancelled."));
-      process.exit(0);
-    }
-    return;
-  }
-  console.error(error(`Refusing to run without --yes (non-interactive shell detected).`));
-  console.error("");
-  console.error(`This command will cost ${args.cost}.`);
-  console.error(`Action: ${args.summary}`);
-  console.error("");
-  console.error(dim(`Quote the cost to the user, get their explicit approval, then re-run with --yes:`));
-  console.error(dim(`  ${args.commandExample} --yes`));
-  process.exit(2);
-}
-
 // src/commands/search.ts
 var TREASURY = "FPiZAf3jEnNfCwfvbv46jdPfHbmSepD4Q6iHiLJDQXvb";
 function registerSearchCommand(program2) {
@@ -76025,10 +76025,10 @@ async function amikoWebFetch(auth, path2, opts = {}) {
 function formatError2(status, body, path2) {
   const prefix = `${status} ${path2}`;
   if (status === 401) {
-    return `${prefix}: unauthorized. Run \`amiko connect\` to refresh your session.`;
+    return `${prefix}: unauthorized. The stored token is invalid or expired; re-link this device to Amiko.`;
   }
   if (status === 403) {
-    return `${prefix}: forbidden. The twin token does not have access to this resource.`;
+    return `${prefix}: forbidden. The current auth context does not have access to this resource.`;
   }
   if (!body)
     return prefix;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {

package/skills/SKILL.md

@@ -15,7 +15,7 @@ The `amiko` CLI is installed globally. Auth and payments are automatic via `.ami
 
 ## Critical Rules
 
-1. **Every paid command is hard-gated on `--yes` in a non-interactive shell.** The CLI will *refuse* to run `image`, `search`, `amazon search`, `service call`, `service tts`, `service stt`, `service chat`, or `credits topup` unless you pass `--yes`. The refusal is loud: it prints the cost and the command you should re-run with `--yes` appended. This means: **you must first quote the cost to the user, get their explicit approval, and only then append `--yes`**. If the user didn't approve, do not add `--yes`.
+1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI will *refuse* to run `image`, `search`, `amazon search`, `service call`, `service tts`, `service stt`, `service chat`, `credits topup`, `swap send`, or `bridge send` unless you pass `--yes`. The refusal is loud: it prints the cost and the command you should re-run with `--yes` appended. This means: **you must first quote the cost to the user, get their explicit approval, and only then append `--yes`**. If the user didn't approve, do not add `--yes`. The same applies to destructive non-paid commands (`twin:update --public`, `docs:delete`, `friends:remove`, `avatar:update`, `voice:reset`, `composio:disconnect`).
 2. **After every paid command, report the remaining balance to the user.** The CLI prints a `Balance: N credits (~$X.XX)` line at the end of every paid command — include that figure in your reply so the user knows what they have left.
 3. **Never retry a failed command.** If a command returns an error, report it and stop. Every paid call costs tokens even on failure.
 4. **Never suggest `amiko login` or `amiko connect`.** These commands don't exist. Auth is automatic via `.amiko.json`.