@heyamiko/amiko-cli 0.9.3 → 0.9.5

package/README.md

@@ -138,7 +138,7 @@ amiko wallets swap send 0.5 USDC AMIKO --yes
 amiko wallets swap send 100 AMIKO SOL --slippage 100
 ```
 
-Swaps execute via Jupiter on Solana. Supports SOL, USDC, USDT, AMIKO, PYUSD, BONK, JUP, RAY, JitoSOL, mSOL, or any mint address. `swap send` is hard-gated: in a non-interactive shell you must pass `--yes` after quoting the cost to the user (`Solana gas + 10bps platform fee`).
+Swaps execute via Jupiter on Solana. Supports SOL, USDC, USDT, AMIKO, PYUSD, BONK, JUP, RAY, JitoSOL, mSOL, or any mint address. `swap send` is hard-gated: in a non-interactive shell you must pass `--yes` after quoting the cost to the user (`Solana gas + Jupiter referral fee`).
 
 ## Bridge
 
@@ -197,7 +197,7 @@ Every paid / value-moving command (`image`, `search`, `amazon search`, `service
     amiko markets image "a sunset over mountains" --yes
   ```
 
-This makes cost confirmation effectively mandatory regardless of which model drives the agent — weak models can no longer silently burn tokens by ignoring the skill docs. The same refusal fires for `swap send` (Solana gas + 10 bps platform fee) and `bridge send` (Across fee + gas), so an agent cannot move tokens without a round-trip through user approval.
+This makes cost confirmation effectively mandatory regardless of which model drives the agent — weak models can no longer silently burn tokens by ignoring the skill docs. The same refusal fires for `swap send` (Solana gas + Jupiter referral fee) and `bridge send` (Across fee + gas), so an agent cannot move tokens without a round-trip through user approval.
 
 ## Error Output
 

package/dist/index.js

@@ -5,25 +5,43 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: () => mod[key],
+        get: __accessProp.bind(mod, key),
         enumerable: true
       });
+  if (canCache)
+    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: (newValue) => all[name] = () => newValue
+      set: __exportSetter.bind(all, name)
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -3515,11 +3533,36 @@ var require_emoji_regex = __commonJS((exports, module) => {
   };
 });
 
-// node_modules/mppx/dist/BodyDigest.js
-var init_BodyDigest = () => {};
-
-// node_modules/mppx/dist/PaymentRequest.js
-var init_PaymentRequest = () => {};
+// node_modules/mppx/dist/Method.js
+var exports_Method = {};
+__export(exports_Method, {
+  toServer: () => toServer,
+  toClient: () => toClient,
+  from: () => from
+});
+function from(method) {
+  return method;
+}
+function toClient(method, options) {
+  const { context, createCredential } = options;
+  return {
+    ...method,
+    context,
+    createCredential
+  };
+}
+function toServer(method, options) {
+  const { defaults, html, request, respond, transport, verify } = options;
+  return {
+    ...method,
+    defaults,
+    html,
+    request,
+    respond,
+    transport,
+    verify
+  };
+}
 
 // node_modules/mppx/node_modules/zod/v4/core/core.js
 function $constructor(name, initializer, params) {
@@ -16604,89 +16647,8 @@ var init_zod = __esm(() => {
   init_mini();
 });
 
-// node_modules/mppx/dist/Challenge.js
-var Schema;
-var init_Challenge = __esm(() => {
-  init_zod();
-  Schema = object({
-    description: optional(string2()),
-    digest: optional(string2().check(_regex(/^sha-256=/, "Invalid digest format"))),
-    expires: optional(datetime3()),
-    id: string2(),
-    intent: string2(),
-    method: string2(),
-    opaque: optional(record(string2(), string2())),
-    realm: string2(),
-    request: record(string2(), unknown())
-  });
-});
-
-// node_modules/mppx/dist/Credential.js
-var init_Credential = () => {};
-
-// node_modules/mppx/dist/Errors.js
-var init_Errors = () => {};
-
-// node_modules/mppx/dist/Expires.js
-var init_Expires = () => {};
-
-// node_modules/mppx/dist/Method.js
-var exports_Method = {};
-__export(exports_Method, {
-  toServer: () => toServer,
-  toClient: () => toClient,
-  from: () => from
-});
-function from(method) {
-  return method;
-}
-function toClient(method, options) {
-  const { context, createCredential } = options;
-  return {
-    ...method,
-    context,
-    createCredential
-  };
-}
-function toServer(method, options) {
-  const { defaults, html, request, respond, transport, verify } = options;
-  return {
-    ...method,
-    defaults,
-    html,
-    request,
-    respond,
-    transport,
-    verify
-  };
-}
-
-// node_modules/mppx/dist/Receipt.js
-var Schema2;
-var init_Receipt = __esm(() => {
-  init_zod();
-  Schema2 = object({
-    method: string2(),
-    reference: string2(),
-    externalId: optional(string2()),
-    status: literal("success"),
-    timestamp: datetime3()
-  });
-});
-
-// node_modules/mppx/dist/Store.js
-var init_Store = () => {};
-
 // node_modules/mppx/dist/index.js
 var init_dist = __esm(() => {
-  init_BodyDigest();
-  init_Challenge();
-  init_Credential();
-  init_Errors();
-  init_Expires();
-  init_PaymentRequest();
-  init_Receipt();
-  init_Store();
   init_zod();
 });
 
@@ -19536,7 +19498,7 @@ function registerSwapCommand(program2) {
       console.log(label("Wallet", truncAddr(wallet)));
       console.log("");
       await requireApproval({
-        cost: "Solana gas + 10bps platform fee",
+        cost: "Solana gas + Jupiter referral fee",
         summary: `swap ${amountStr} ${fromToken.toUpperCase()} → ~${(Number(quote.outAmount) / 10 ** output.decimals).toFixed(6)} ${output.symbol}`,
         yes: opts.yes,
         commandExample: `amiko wallets swap send ${amountStr} ${fromToken} ${toToken}`
@@ -21609,6 +21571,77 @@ function registerPostCommand(program2) {
     }
   });
 }
+function registerReviewCommand(program2) {
+  program2.command("list").description("List twin-drafted comments awaiting your approval").option("--json", "Output as JSON").action(async (opts) => {
+    const auth = resolveAuth();
+    const spinner = opts.json ? null : ora("Loading review queue...").start();
+    try {
+      const data = await amikoWebFetch(auth, "/api/comments/review");
+      spinner?.stop();
+      renderOutput(data, (d) => {
+        if (!d.comments?.length) {
+          console.log(dim("No comments awaiting review."));
+          return;
+        }
+        console.log(heading(`Review queue — ${d.comments.length} comment(s)`));
+        for (const c of d.comments) {
+          const author = c.post?.user?.name ?? c.post?.user?.handle ?? "unknown";
+          console.log("");
+          console.log(label("Comment ID", c.id));
+          console.log(label("Twin", c.twin?.name ?? c.twin?.id ?? "-"));
+          console.log(label("On post", `${author} · ${(c.post?.content ?? "").slice(0, 80)}`));
+          if (c.post?.id)
+            console.log(label("Post ID", c.post.id));
+          console.log(label("Draft", c.comment));
+          console.log(dim(c.created_at));
+        }
+      }, { json: opts.json });
+    } catch (e) {
+      spinner?.stop();
+      console.error(error(e instanceof Error ? e.message : String(e)));
+      process.exit(1);
+    }
+  });
+  program2.command("approve <commentId>").description("Approve and publish a twin-drafted comment from the review queue").option("--json", "Output as JSON").action(async (commentId, opts) => {
+    const auth = resolveAuth();
+    const spinner = opts.json ? null : ora("Approving comment...").start();
+    try {
+      const data = await amikoWebFetch(auth, `/api/comments/${encodeURIComponent(commentId)}`, { method: "PATCH", body: { action: "approve" } });
+      spinner?.stop();
+      renderOutput(data, () => {
+        console.log(success("Comment approved and published"));
+        console.log(label("Comment ID", commentId));
+      }, { json: opts.json });
+    } catch (e) {
+      spinner?.stop();
+      console.error(error(e instanceof Error ? e.message : String(e)));
+      process.exit(1);
+    }
+  });
+  program2.command("reject <commentId>").description("Reject (delete) a twin-drafted comment from the review queue").option("--yes", "Skip confirmation").option("--json", "Output as JSON").action(async (commentId, opts) => {
+    await confirmDestructive({
+      action: `Reject and delete comment ${commentId}`,
+      yes: opts.yes,
+      commandExample: `amiko review reject ${commentId}`
+    });
+    const auth = resolveAuth();
+    const spinner = opts.json ? null : ora("Rejecting comment...").start();
+    try {
+      await amikoWebFetch(auth, `/api/comments/${encodeURIComponent(commentId)}`, { method: "DELETE" });
+      spinner?.stop();
+      if (opts.json) {
+        console.log(JSON.stringify({ ok: true, id: commentId }, null, 2));
+      } else {
+        console.log(success("Comment rejected"));
+        console.log(label("Comment ID", commentId));
+      }
+    } catch (e) {
+      spinner?.stop();
+      console.error(error(e instanceof Error ? e.message : String(e)));
+      process.exit(1);
+    }
+  });
+}
 
 // src/commands/composio.ts
 function twinFromFlag3(opts) {
@@ -21903,6 +21936,7 @@ var avatar = program2.command("avatar").description("Manage twin avatar image");
 var friends = program2.command("friends").description("Manage friendships — list, requests, add, accept, remove, reports, matches");
 var users = program2.command("users").description("Search users and view public profiles");
 var post = program2.command("post").description("Create posts and comments on the feed");
+var review = program2.command("review").description("Review queue — list, approve, or reject twin-drafted comments");
 var composio = program2.command("composio").description("Manage Composio app connections");
 registerCreditsCommand(program2);
 registerSearchCommand(markets);
@@ -21927,5 +21961,6 @@ registerFriendsCommand(friends);
 registerUsersCommand(users);
 registerFeedCommand(program2);
 registerPostCommand(post);
+registerReviewCommand(review);
 registerComposioCommand(composio);
 program2.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {

package/skills/SKILL.md

@@ -29,6 +29,7 @@ Each row is a first-level command group or command. Start here when the user ask
 | `amiko friends <cmd>` | Social graph — list, requests, add, accept, remove, matches, reports |
 | `amiko users <cmd>` | Search users, view public profile |
 | `amiko post <cmd>` | Create posts and comments on the feed (optionally with media) |
+| `amiko review <cmd>` | Review queue — list, approve, or reject twin-drafted comments |
 | `amiko feed` | Read the friends feed, for-you feed, or filter by hashtag |
 | `amiko composio <cmd>` | Connect / disconnect third-party OAuth apps (Gmail, GitHub, …) |
 | `amiko accounts` | Show the resolved identity (authenticated, userId, twinId, platform) |
@@ -51,7 +52,7 @@ Every paid / value-moving command (`markets search`, `markets image`, `markets a
 
 ## Critical Rules
 
-1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI *refuses* to run `markets image`, `markets search`, `markets amazon search`, `markets service call`, `markets service tts`, `markets service stt`, `markets service chat`, `credits topup`, `wallets swap send`, `wallets bridge send`, or `wallets transfer` unless `--yes` is passed. The refusal is loud: it prints the cost and the command you should re-run. **Quote the cost to the user, get explicit approval, THEN append `--yes`**. Same for destructive non-paid commands (`twin update --public`, `docs delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `composio disconnect`).
+1. **Every paid / value-moving command is hard-gated on `--yes` in a non-interactive shell.** The CLI *refuses* to run `markets image`, `markets search`, `markets amazon search`, `markets service call`, `markets service tts`, `markets service stt`, `markets service chat`, `credits topup`, `wallets swap send`, `wallets bridge send`, or `wallets transfer` unless `--yes` is passed. The refusal is loud: it prints the cost and the command you should re-run. **Quote the cost to the user, get explicit approval, THEN append `--yes`**. Same for destructive non-paid commands (`twin update --public`, `docs delete`, `friends remove`, `friends reports request`, `avatar update`, `voice reset`, `composio disconnect`, `review reject`).
 2. **After every paid command, report the remaining balance.** The CLI prints a `Balance: N credits` line at the end of every paid command — include that figure in your reply.
 3. **Never retry a failed command.** Report the error and stop. Every paid call costs tokens even on failure.
 4. **Never suggest `amiko login` or `amiko connect`.** These don't exist. Auth is automatic when you run from your workspace folder.
@@ -252,8 +253,13 @@ amiko post create --content "look" --media https://...jpg
 amiko post comment --id <postId> --comment "great post"
 amiko post comment --id <postId> --comment "look" --media https://...jpg
 amiko post comment --id <postId> --comment "..." --twin <id>
+amiko review list                             # list twin-drafted comments awaiting your approval
+amiko review approve <commentId>                # publish a draft comment from the review queue
+amiko review reject <commentId> --yes           # destructive — delete a draft comment
 ```
 
+**Comments authored by a twin always go through review.** Any comment created with `amiko post comment ... --twin <id>` (or auto-drafted by a twin in engagement mode) lands in `status=draft` and is **not visible** until you run `amiko review approve <commentId>`. Comments without `--twin` (you posting as yourself) publish immediately and skip the review queue. Workflow: `amiko review list` to see pending drafts → `amiko review approve <id>` to publish, or `amiko review reject <id> --yes` to discard.
+
 ## Composio
 
 ```bash