@heyamiko/amiko-cli 0.9.9-beta.7 → 0.9.9-beta.8

package/README.md

@@ -1,4 +1,4 @@
-# @heyamiko/amiko-cli (v0.9.9-beta.7)
+# @heyamiko/amiko-cli (v0.9.9-beta.8)
 
 Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed, Composio apps) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
@@ -392,6 +392,11 @@ npm publish
 
 ## Changelog
 
+### 0.9.9-beta.8
+
+- `friends reports request --pay` now does a **free preflight** (`POST /v1/friend-reports/preflight`) before signing the on-chain AMIKO transfer. Validates User → Friendship → consent → personality profile against amiko-web. If anything's wrong (wrong id shape, missing consent, missing profile), the CLI aborts with a targeted tip — no AMIKO is transferred. Closes a hole where every retry against a bad `--id` burned ~3 AMIKO via the irreversible X-Payment-Tx flow.
+- Confirm prompt now resolves and shows the respondent's name and User.id (e.g. `Pay X AMIKO to regenerate a friend report with Matthew Graham (cmjz...) via friendship cmnlj...`) so a human can spot a wrong-person mistake before approval.
+
 ### 0.9.9-beta.7
 
 - `amiko friends list` table now shows the friend's `User.id` as the primary `USER ID` column (what `friends reports request`, `matches`, etc. all need) and surfaces `friendship_id` as a separate `FRIENDSHIP` column (used by `friends accept/remove`). Mirrors how amiko-web's UI separates the two ids: person actions take `actor.id`, row actions take `friendship_id`. JSON output unchanged. Fixes a 404 from `/api/internal/friend-reports/regenerate` when an agent fed the friendship row id back as `--id` for a paid report.

package/dist/index.js

@@ -27404,6 +27404,40 @@ async function quoteFriendReport(auth) {
     usdAnchor: PRICE_USD
   };
 }
+async function preflightFriendReport(body) {
+  const config2 = loadConfig();
+  const mppBase2 = config2.apiBase.replace(/\/$/, "");
+  const stripDidPrivy = (id) => id.startsWith("did:privy:") ? id.replace("did:privy:", "") : id;
+  const normalizedBody = {
+    ...body,
+    initiator_user_id: stripDidPrivy(body.initiator_user_id),
+    respondent_user_id: stripDidPrivy(body.respondent_user_id)
+  };
+  try {
+    const res = await fetch(`${mppBase2}/v1/friend-reports/preflight`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(normalizedBody)
+    });
+    const data = await res.json().catch(() => ({}));
+    if (res.ok && data.ok === true) {
+      return data;
+    }
+    return {
+      ok: false,
+      status: res.status,
+      error: (typeof data.error === "string" ? data.error : null) ?? `preflight returned ${res.status}`,
+      body: data
+    };
+  } catch (err) {
+    return {
+      ok: false,
+      status: 0,
+      error: err instanceof Error ? err.message : "preflight fetch failed",
+      body: {}
+    };
+  }
+}
 async function mppFriendReportGenerate(auth, body, opts = {}) {
   const config2 = loadConfig();
   const mppBase2 = config2.apiBase.replace(/\/$/, "");
@@ -27513,10 +27547,39 @@ async function runPaidRegenerate(args) {
     console.error(error("Paid regenerate requires your user id. Add 'amikoUserId' to your .amiko.json (alongside amikoTwinToken/amikoTwinId)."));
     process.exit(1);
   }
+  const preflightSpinner = args.json ? null : ora("Validating request (no charge)...").start();
+  const preflight = await preflightFriendReport({
+    report_type: args.type,
+    initiator_user_id: auth.userId,
+    respondent_user_id: args.id
+  });
+  preflightSpinner?.stop();
+  if (!preflight.ok) {
+    if (args.json) {
+      console.log(JSON.stringify({
+        ok: false,
+        stage: "preflight",
+        status: preflight.status,
+        error: preflight.error,
+        body: preflight.body
+      }, null, 2));
+    } else {
+      console.error(error(`Preflight failed (HTTP ${preflight.status}): ${preflight.error}`));
+      if (preflight.status === 404) {
+        console.error(dim("Tip: did you pass a friendship_id where a User.id was expected? " + "Run 'amiko friends list --json' and use the friend.id field, not friendship_id."));
+      } else if (preflight.status === 403) {
+        console.error(dim("Tip: consent must already be granted by both users for this report_type. " + "Run 'amiko friends reports request --id <user> --type <type>' (without --pay), " + "wait for accept, then retry with --pay."));
+      } else if (preflight.status === 422) {
+        console.error(dim("Tip: at least one user is missing a personality profile. " + "Both users must have completed onboarding."));
+      }
+    }
+    process.exit(1);
+  }
   const quote = await quoteFriendReport(auth);
   const priceLine = "error" in quote ? "(price oracle down — actual amount computed at server)" : `${quote.amikoAmount} AMIKO ≈ $${quote.usdAnchor} (1 AMIKO = $${quote.amikoUsd.toFixed(4)})`;
+  const respondentLabel = preflight.respondent.name ? `${preflight.respondent.name} (${preflight.respondent.id})` : preflight.respondent.id;
   await confirmDestructive({
-    action: `Pay ${priceLine} to regenerate a ${args.type} matching report with user ${args.id} (signed by your agent's wallet via amiko-web)`,
+    action: `Pay ${priceLine} to regenerate a ${args.type} matching report with ${respondentLabel} via friendship ${preflight.friendship_id} (signed by your agent's wallet)`,
     yes: args.yes,
     commandExample: `amiko friends reports request --id ${args.id} --type ${args.type} --pay`
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heyamiko/amiko-cli",
-  "version": "0.9.9-beta.7",
+  "version": "0.9.9-beta.8",
   "description": "Amiko CLI — swap tokens, manage credits, bridge cross-chain, and call marketplace agents",
   "type": "module",
   "bin": {