@heyamiko/amiko-cli 0.9.9-beta.6 → 0.9.9-beta.8

package/README.md

@@ -1,4 +1,4 @@
-# @heyamiko/amiko-cli (v0.9.7)
+# @heyamiko/amiko-cli (v0.9.9-beta.8)
 
 Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed, Composio apps) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
@@ -392,6 +392,37 @@ npm publish
 
 ## Changelog
 
+### 0.9.9-beta.8
+
+- `friends reports request --pay` now does a **free preflight** (`POST /v1/friend-reports/preflight`) before signing the on-chain AMIKO transfer. Validates User → Friendship → consent → personality profile against amiko-web. If anything's wrong (wrong id shape, missing consent, missing profile), the CLI aborts with a targeted tip — no AMIKO is transferred. Closes a hole where every retry against a bad `--id` burned ~3 AMIKO via the irreversible X-Payment-Tx flow.
+- Confirm prompt now resolves and shows the respondent's name and User.id (e.g. `Pay X AMIKO to regenerate a friend report with Matthew Graham (cmjz...) via friendship cmnlj...`) so a human can spot a wrong-person mistake before approval.
+
+### 0.9.9-beta.7
+
+- `amiko friends list` table now shows the friend's `User.id` as the primary `USER ID` column (what `friends reports request`, `matches`, etc. all need) and surfaces `friendship_id` as a separate `FRIENDSHIP` column (used by `friends accept/remove`). Mirrors how amiko-web's UI separates the two ids: person actions take `actor.id`, row actions take `friendship_id`. JSON output unchanged. Fixes a 404 from `/api/internal/friend-reports/regenerate` when an agent fed the friendship row id back as `--id` for a paid report.
+
+### 0.9.9-beta.6
+
+- Code-review followups across `friends`, `image`, `memory`, and the friend-report payment lib: explicit allowlists for `--size`/`--quality`/`--format`/`--background` on `markets image` (rejects unknown values before charging), `auto` quality maps to `high` for billing so we never under-bill, `memory` uses `lstatSync` + `path.relative` to skip symlinks and stop relying on string `startsWith` for sandboxing, and the friends-report transfer body now sets `chain: "solana"` explicitly.
+
+### 0.9.9-beta.5
+
+- `amiko friends reports request --pay` — pays the AMIKO friend-report fee from the agent's Crossmint-custodied Solana wallet (no keys held in CLI). Two-step flow: `amiko-web /transfer` signs the AMIKO charge to treasury, then `mpp-service /v1/friend-reports/generate` is called with `X-Payment-Tx`. Confirm prompt shows the exact AMIKO amount quoted from the live spot price.
+- `--json` output for friends-report includes `txHash` + `amikoAmount` payment metadata.
+- `did:privy:` prefix is stripped from user ids before the mpp call so amiko-web's `User` table lookup matches.
+- `markets image` pricing is now dynamic: charges OpenAI pass-through × 1.30 markup per model/quality/size, quoted in AMIKO from live `AMIKO/USD`. Confirm prompt shows the exact amount before any transfer.
+- Imports `Mppx` + Solana helpers from `@solana/mpp/client` subpath (root barrel only re-exports `charge`).
+
+### 0.9.9-beta.1 → 0.9.9-beta.4
+
+- `amiko memory add | list | search | rm | status | sync` — manage the twin's persistent memory store from the CLI.
+- `memory sync` now also walks `<workspace>/memory/` so memory written next to your project files gets picked up.
+- `SKILL.md` documents the memory commands and biases agents toward calling `memory search` before falling back to other context-discovery flows.
+
+### 0.9.8
+
+- `SKILL.md` defaults `platform=Amiko` and steers agents away from `sessions_*` lookups.
+
 ### 0.9.7
 
 - `composio connect` is now idempotent by default. Previously the CLI sent `forceReconnect: true` whenever `--force` was omitted, which caused every status probe to tear down the active Composio connection. The new default is `forceReconnect: false`: if the toolkit is already connected, the call returns `{ alreadyConnected: true }` without touching the connection. Pass `--force` explicitly to opt into a destructive reconnect.

package/dist/index.js

@@ -27404,6 +27404,40 @@ async function quoteFriendReport(auth) {
     usdAnchor: PRICE_USD
   };
 }
+async function preflightFriendReport(body) {
+  const config2 = loadConfig();
+  const mppBase2 = config2.apiBase.replace(/\/$/, "");
+  const stripDidPrivy = (id) => id.startsWith("did:privy:") ? id.replace("did:privy:", "") : id;
+  const normalizedBody = {
+    ...body,
+    initiator_user_id: stripDidPrivy(body.initiator_user_id),
+    respondent_user_id: stripDidPrivy(body.respondent_user_id)
+  };
+  try {
+    const res = await fetch(`${mppBase2}/v1/friend-reports/preflight`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(normalizedBody)
+    });
+    const data = await res.json().catch(() => ({}));
+    if (res.ok && data.ok === true) {
+      return data;
+    }
+    return {
+      ok: false,
+      status: res.status,
+      error: (typeof data.error === "string" ? data.error : null) ?? `preflight returned ${res.status}`,
+      body: data
+    };
+  } catch (err) {
+    return {
+      ok: false,
+      status: 0,
+      error: err instanceof Error ? err.message : "preflight fetch failed",
+      body: {}
+    };
+  }
+}
 async function mppFriendReportGenerate(auth, body, opts = {}) {
   const config2 = loadConfig();
   const mppBase2 = config2.apiBase.replace(/\/$/, "");
@@ -27513,10 +27547,39 @@ async function runPaidRegenerate(args) {
     console.error(error("Paid regenerate requires your user id. Add 'amikoUserId' to your .amiko.json (alongside amikoTwinToken/amikoTwinId)."));
     process.exit(1);
   }
+  const preflightSpinner = args.json ? null : ora("Validating request (no charge)...").start();
+  const preflight = await preflightFriendReport({
+    report_type: args.type,
+    initiator_user_id: auth.userId,
+    respondent_user_id: args.id
+  });
+  preflightSpinner?.stop();
+  if (!preflight.ok) {
+    if (args.json) {
+      console.log(JSON.stringify({
+        ok: false,
+        stage: "preflight",
+        status: preflight.status,
+        error: preflight.error,
+        body: preflight.body
+      }, null, 2));
+    } else {
+      console.error(error(`Preflight failed (HTTP ${preflight.status}): ${preflight.error}`));
+      if (preflight.status === 404) {
+        console.error(dim("Tip: did you pass a friendship_id where a User.id was expected? " + "Run 'amiko friends list --json' and use the friend.id field, not friendship_id."));
+      } else if (preflight.status === 403) {
+        console.error(dim("Tip: consent must already be granted by both users for this report_type. " + "Run 'amiko friends reports request --id <user> --type <type>' (without --pay), " + "wait for accept, then retry with --pay."));
+      } else if (preflight.status === 422) {
+        console.error(dim("Tip: at least one user is missing a personality profile. " + "Both users must have completed onboarding."));
+      }
+    }
+    process.exit(1);
+  }
   const quote = await quoteFriendReport(auth);
   const priceLine = "error" in quote ? "(price oracle down — actual amount computed at server)" : `${quote.amikoAmount} AMIKO ≈ $${quote.usdAnchor} (1 AMIKO = $${quote.amikoUsd.toFixed(4)})`;
+  const respondentLabel = preflight.respondent.name ? `${preflight.respondent.name} (${preflight.respondent.id})` : preflight.respondent.id;
   await confirmDestructive({
-    action: `Pay ${priceLine} to regenerate a ${args.type} matching report with user ${args.id} (signed by your agent's wallet via amiko-web)`,
+    action: `Pay ${priceLine} to regenerate a ${args.type} matching report with ${respondentLabel} via friendship ${preflight.friendship_id} (signed by your agent's wallet)`,
     yes: args.yes,
     commandExample: `amiko friends reports request --id ${args.id} --type ${args.type} --pay`
   });
@@ -27596,12 +27659,20 @@ function registerFriendsCommand(program2) {
         }
         console.log(heading(`Friends (${items.length})`));
         const rows = [
-          [dim("ID"), dim("NAME"), dim("HANDLE"), dim("TYPE"), dim("SINCE")],
+          [
+            dim("USER ID"),
+            dim("NAME"),
+            dim("HANDLE"),
+            dim("TYPE"),
+            dim("FRIENDSHIP"),
+            dim("SINCE")
+          ],
           ...items.map((f) => [
-            f.friendship_id,
+            f.friend.id,
             f.friend.name ?? "-",
             f.friend.handle ?? "-",
             f.friend.type,
+            f.friendship_id,
             f.since?.slice(0, 10) ?? "-"
           ])
         ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.9.9-beta.6",
+  "version": "0.9.9-beta.8",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {