@heyamiko/amiko-cli 0.9.9-beta.8 → 0.10.0-beta.0

package/README.md

@@ -1,4 +1,4 @@
-# @heyamiko/amiko-cli (v0.9.9-beta.8)
+# @heyamiko/amiko-cli (v0.9.9)
 
 Manage wallets, credits, swaps, MPP marketplace services, and your Amiko twin (identity, documents, voice, avatar, friends, feed, Composio apps) from the terminal. Works for both human users and AI agents running on OpenClaw.
 
@@ -86,7 +86,7 @@ amiko credits topup 10000 --wallet Gu2b...QVya        # specific wallet (else de
 ```
 
 **Supported tokens:** AMIKO, SOL, USDC, USDT
-**Supported chains:** Solana, Base, Ethereum, Tempo
+**Supported chains:** Solana, Base, Ethereum
 
 **After every paid command, the CLI prints a `Balance: N credits (~$X.XX)` line** so agents can relay the remaining balance to the user without a separate `credits balance` call.
 
@@ -152,7 +152,7 @@ amiko wallets bridge routes                      # available bridge routes
 amiko wallets bridge limits                      # min/max limits per route
 ```
 
-Default route: Solana → Tempo. Use `--from` and `--to` flags for other chains. Like `swap send`, `bridge send` refuses to run in a non-interactive shell without `--yes` so agents must quote the Across fee + gas to the user before executing.
+Default route: Solana → Base. Use `--from` and `--to` flags for other chains. Like `swap send`, `bridge send` refuses to run in a non-interactive shell without `--yes` so agents must quote the Across fee + gas to the user before executing.
 
 ## MPP Services
 
@@ -313,8 +313,7 @@ src/
     ├── format.ts          # terminal output helpers + renderOutput(--json)
     ├── confirm.ts         # requireApproval + confirmDestructive
     ├── mpp-topup.ts       # MPP SDK topup helper
-    ├── across.ts          # Across Protocol bridge
-    └── tempo.ts           # Tempo chain helpers
+    └── across.ts          # Across Protocol bridge
 ```
 
 ## Twin & Social Commands (v0.8.0)
@@ -392,6 +391,12 @@ npm publish
 
 ## Changelog
 
+### 0.9.9
+
+- **Tempo support removed (breaking).** `wallets bridge` default destination is now Base instead of Tempo (see "Default route: Solana → Base" above and the existing `--from`/`--to` flags). The `tempo` entry is gone from `across.ts` and `lib/tempo.ts` is deleted, so `--to tempo` will now error with an unknown-chain message — there is no escape hatch. **Update any scripts or agents that relied on the old default**: pass `--to base` (or another supported chain) explicitly. `search` no longer falls back to the Tempo explorer either.
+- `lib/api.ts` fetches now wrap an `AbortController` with a 30 s default timeout — a stalled MPP endpoint no longer hangs the agent process. `markets service call` adds a 60 s timeout on the paid call and 15 s on the openapi.json price probe.
+- **Security fix.** `markets service call <method> <path>` now rejects any `path` that doesn't start with `/`, closing a credential-leakage hole. The previous behavior treated `http(s)://…` paths as full URLs, which let a caller redirect the paid request — including the `X-Payment-Tx` and `X-Twin-Id` headers — to an arbitrary external host, leaking the on-chain payment proof + twin identity.
+
 ### 0.9.9-beta.8
 
 - `friends reports request --pay` now does a **free preflight** (`POST /v1/friend-reports/preflight`) before signing the on-chain AMIKO transfer. Validates User → Friendship → consent → personality profile against amiko-web. If anything's wrong (wrong id shape, missing consent, missing profile), the CLI aborts with a targeted tip — no AMIKO is transferred. Closes a hole where every retry against a bad `--id` burned ~3 AMIKO via the irreversible X-Payment-Tx flow.