atris 2.5.1 → 2.5.3

package/atris/skills/create-app/SKILL.md

@@ -54,20 +54,9 @@ Auth header: `Authorization: Bearer $TOKEN`
 
 Adapt the flow based on what the user described. Skip steps that don't apply.
 
-### Step 0: Clarify Intent
-
-Before building anything, ask the user:
-
-1. **Personal or business?** — First check if the user has any businesses: `GET https://api.atris.ai/api/business` with their token. If empty, it's personal — don't ask, just proceed. If they have businesses, ask: "Is this just for you, or for [business name]?"
-2. **How does data get in?** — Schedule (daily pull), webhook (data pushed in), manual (you trigger it), email, or chat?
-3. **How should output reach you?** — Email, feed post, API (for a custom UI), or just stored for querying?
-4. **Any API keys needed?** — Does this connect to an external service (Mixpanel, GitHub, Stripe, etc)?
-
-Keep it conversational. Don't ask all 4 at once if the answer is obvious from context. A mood tracker is clearly personal, manual input, no API keys. A Mixpanel analytics app clearly needs an API key and a daily schedule.
-
 ### Step 1: Create the App
 
-Ask the user for a name if they didn't already give one. Generate a slug (lowercase, hyphens, no spaces).
+Ask the user for a name. Generate a slug (lowercase, hyphens, no spaces).
 
 ```bash
 curl -s -X POST "https://api.atris.ai/api/apps" \
@@ -96,7 +85,43 @@ Save the returned `id` as `APP_ID` and `share_token` as `SLUG`.
 
 Only if the workflow needs external API access (Mixpanel, GitHub, Stripe, etc).
 
-Ask the user for each key. Store one at a time:
+Ask the user for each key. **Default to local storage** (keys stay on their machine).
+
+**Option A: Local storage (default, recommended)**
+
+Keys are saved to `~/.atris/secrets/{SLUG}/` on the user's machine. They never leave the machine when using the CLI agent. If using the AI Computer, they're transmitted over TLS but never persisted on Atris infrastructure.
+
+**macOS/Linux:**
+```bash
+mkdir -p ~/.atris/secrets/SLUG
+read -s -p "Enter KEY_NAME: " secret_val
+printf '%s' "$secret_val" > ~/.atris/secrets/SLUG/KEY_NAME
+chmod 600 ~/.atris/secrets/SLUG/KEY_NAME
+unset secret_val
+echo "Saved locally."
+```
+
+**Windows (PowerShell):**
+```powershell
+$dir = "$env:USERPROFILE\.atris\secrets\SLUG"
+New-Item -ItemType Directory -Force -Path $dir | Out-Null
+$val = Read-Host -Prompt "Enter KEY_NAME" -AsSecureString
+$plain = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($val))
+Set-Content -Path "$dir\KEY_NAME" -Value $plain -NoNewline
+icacls "$dir\KEY_NAME" /inheritance:r /grant:r "${env:USERNAME}:(R,W)" | Out-Null
+Remove-Variable plain, val
+Write-Host "Saved locally."
+```
+
+Verify (key names only, never values):
+```bash
+ls ~/.atris/secrets/SLUG/           # macOS/Linux
+dir $env:USERPROFILE\.atris\secrets\SLUG  # Windows
+```
+
+**Option B: Cloud storage (cross-device access)**
+
+If the user needs secrets accessible from any device or the web UI, store in the encrypted cloud vault:
 
 ```bash
 curl -s -X PUT "https://api.atris.ai/api/apps/SLUG/secrets/KEY_NAME" \
@@ -107,6 +132,8 @@ curl -s -X PUT "https://api.atris.ai/api/apps/SLUG/secrets/KEY_NAME" \
 
 Never log or display the secret value after storing it.
 
+**Always ask the user which storage tier they prefer before storing keys.** Explain: "Local means keys stay on your machine. Cloud means they're encrypted and available from any device."
+
 **Skip this step** if the app doesn't need external API keys (chat apps, simple forms).
 
 ### Step 3: Create the Agent + Skill (if needed)

package/atris/skills/drive/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: drive
-description: Google Drive integration via AtrisOS API. Browse, search, read, upload files and work with Google Sheets. Use when user asks about Drive, files, docs, sheets, or spreadsheets.
-version: 1.2.0
+description: Google Drive integration via AtrisOS API. Full file management (upload, copy, share, move, delete), Google Docs (create, edit, format, templates), Google Sheets (read, write, format, charts). Use when user asks about Drive, files, docs, sheets, or spreadsheets.
+version: 2.0.0
 tags:
   - drive
   - backend
@@ -222,12 +222,209 @@ curl -s -X PUT "https://api.atris.ai/api/integrations/google-drive/files/{file_i
   }'
 ```
 
+### Delete / Trash File
+```bash
+# Move to trash (recoverable)
+curl -s -X DELETE "https://api.atris.ai/api/integrations/google-drive/files/{file_id}?trash=true" \
+  -H "Authorization: Bearer $TOKEN"
+
+# Permanently delete (irreversible)
+curl -s -X DELETE "https://api.atris.ai/api/integrations/google-drive/files/{file_id}" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### Copy File
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/copy" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"name": "Copy of Document", "folder_id": "OPTIONAL_FOLDER_ID"}'
+```
+
+Works with Docs, Sheets, Slides — creates a full copy.
+
+### Share File
+```bash
+# Share with a specific user
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/share" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"email": "user@example.com", "role": "writer", "notify": true}'
+
+# Share with anyone who has the link
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/share" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"anyone": true, "role": "reader"}'
+```
+
+Roles: `reader`, `writer`, `commenter`
+
+### Create Folder
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/folders" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"name": "Project Files", "parent_id": "OPTIONAL_PARENT_FOLDER_ID"}'
+```
+
+### Move File
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/move" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"new_parent_id": "TARGET_FOLDER_ID"}'
+```
+
+### Pagination
+
+List and search endpoints return `next_page_token` when there are more results. Pass it to get the next page:
+
+```bash
+curl -s "https://api.atris.ai/api/integrations/google-drive/files?page_size=20&page_token=NEXT_PAGE_TOKEN" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+Works on: `/files`, `/search`, `/shared-drives`
+
+---
+
+## Google Docs
+
+Native Google Docs creation and editing. Uses the same Drive OAuth connection.
+
+### List Google Docs
+```bash
+curl -s "https://api.atris.ai/api/integrations/google-docs/documents?page_size=20" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### Create a New Google Doc
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"title": "Q1 2026 Report"}'
+```
+
+Returns `documentId` and `url` (direct link to edit in browser).
+
+### Read a Google Doc
+```bash
+curl -s "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+Returns full document structure (body, paragraphs, text runs, styles).
+
+### Insert Text into a Doc
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/batch-update" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "requests": [
+      {
+        "insertText": {
+          "location": {"index": 1},
+          "text": "Hello, this is the first paragraph.\n\nSecond paragraph here.\n"
+        }
+      }
+    ]
+  }'
+```
+
+**Text is inserted at a character index.** Index 1 = start of document body. Newlines create paragraphs.
+
+### Replace Placeholders in a Doc Template
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/batch-update" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "requests": [
+      {
+        "replaceAllText": {
+          "containsText": {"text": "{{client_name}}", "matchCase": true},
+          "replaceText": "Acme Corp"
+        }
+      },
+      {
+        "replaceAllText": {
+          "containsText": {"text": "{{date}}", "matchCase": true},
+          "replaceText": "March 5, 2026"
+        }
+      }
+    ]
+  }'
+```
+
+### Format Text (Bold, Italic, Font Size, Color)
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/batch-update" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "requests": [
+      {
+        "updateTextStyle": {
+          "range": {"startIndex": 1, "endIndex": 20},
+          "textStyle": {"bold": true, "fontSize": {"magnitude": 18, "unit": "PT"}},
+          "fields": "bold,fontSize"
+        }
+      }
+    ]
+  }'
+```
+
+### Insert a Table
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/batch-update" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "requests": [
+      {
+        "insertTable": {
+          "rows": 3,
+          "columns": 2,
+          "location": {"index": 1}
+        }
+      }
+    ]
+  }'
+```
+
+### Export Doc as PDF
+```bash
+curl -s "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/export" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+Returns base64-encoded PDF.
+
+### Export Doc as Plain Text
+```bash
+curl -s "https://api.atris.ai/api/integrations/google-docs/documents/{document_id}/text" \
+  -H "Authorization: Bearer $TOKEN"
+```
+
 ---
 
 ## Google Sheets
 
 Full read/write access to Google Sheets.
 
+### Create a Spreadsheet
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"title": "Q1 Revenue Tracker"}'
+```
+
+Returns `spreadsheetId` and `url` (direct link to edit in browser).
+
 ### Get Spreadsheet Info
 ```bash
 curl -s "https://api.atris.ai/api/integrations/google-drive/sheets/{spreadsheet_id}" \
@@ -276,10 +473,65 @@ curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets/{spre
   }'
 ```
 
+### Format Cells (batchUpdate)
+
+Apply formatting, merges, conditional formatting, charts, and other structural changes.
+
+```bash
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets/{spreadsheet_id}/batchUpdate" \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "requests": [
+      {
+        "repeatCell": {
+          "range": {"sheetId": 0, "startRowIndex": 0, "endRowIndex": 1},
+          "cell": {
+            "userEnteredFormat": {
+              "textFormat": {"bold": true},
+              "backgroundColor": {"red": 0.9, "green": 0.9, "blue": 0.9}
+            }
+          },
+          "fields": "userEnteredFormat(textFormat,backgroundColor)"
+        }
+      }
+    ]
+  }'
+```
+
+**Common request types:**
+- `repeatCell` — format a range (bold, colors, font size, alignment)
+- `mergeCells` — merge a range into one cell
+- `updateBorders` — add borders to cells
+- `autoResizeDimensions` — auto-fit column widths
+- `addConditionalFormatRule` — highlight cells based on rules
+- `addChart` — embed a chart
+- `addSheet` / `deleteSheet` — manage sheets/tabs
+- `sortRange` — sort rows by a column
+
+**Range format:** `{"sheetId": 0, "startRowIndex": 0, "endRowIndex": 1, "startColumnIndex": 0, "endColumnIndex": 3}` — sheetId 0 = first tab, indices are 0-based.
+
+**Color format:** RGB floats 0-1, e.g. `{"red": 0.2, "green": 0.6, "blue": 1.0}`
+
+You can send multiple requests in one call — they execute in order.
+
 ---
 
 ## Workflows
 
+### "Create a Google Doc with content"
+1. Run bootstrap
+2. Create doc: `POST /google-docs/documents` with `{"title": "..."}`
+3. Insert text: `POST /google-docs/documents/{id}/batch-update` with `insertText` requests
+4. Return the edit URL to user
+
+### "Fill a doc template"
+1. Run bootstrap
+2. Copy template: `POST /files/{template_id}/copy` with `{"name": "Client Proposal"}`
+3. Replace placeholders: `POST /google-docs/documents/{new_id}/batch-update` with `replaceAllText` requests
+4. Share if needed: `POST /files/{id}/share`
+5. Return URL
+
 ### "Find a file in my Drive"
 1. Run bootstrap
 2. Search: `GET /google-drive/search?q=QUERY`
@@ -316,25 +568,44 @@ curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets/{spre
 2. Search: `GET /google-drive/search?q=QUERY` (automatically searches My Drive + all shared drives)
 3. Display results
 
-### "Create a Google Doc"
+### "Format a spreadsheet"
+1. Run bootstrap
+2. Find the sheet, get its `spreadsheetId`
+3. Build requests array — bold headers, colors, borders, auto-resize, etc.
+4. **Show user what formatting will be applied, get approval**
+5. Apply: `POST /google-drive/sheets/{id}/batchUpdate` with `{"requests": [...]}`
+
+### "Create a spreadsheet with data"
+1. Run bootstrap
+2. Create: `POST /google-drive/sheets` with `{"title": "..."}`
+3. Write headers + data: `PUT /google-drive/sheets/{id}/values` with range + values
+4. Format headers: `POST /google-drive/sheets/{id}/batchUpdate` (bold, background color)
+5. Return the URL
+
+### "Share a file"
+1. Run bootstrap
+2. Find the file
+3. **Ask user**: share with specific email or anyone with link?
+4. Share: `POST /google-drive/files/{id}/share`
+
+### "Organize files into folders"
+1. Run bootstrap
+2. Create folder: `POST /google-drive/folders` with `{"name": "..."}`
+3. Move files: `POST /google-drive/files/{id}/move` with `{"new_parent_id": "FOLDER_ID"}`
+
+### "Copy a template"
+1. Run bootstrap
+2. Find the template file
+3. Copy: `POST /google-drive/files/{id}/copy` with `{"name": "New Name"}`
+4. If it's a Doc, replace placeholders via `/google-docs/documents/{new_id}/batch-update`
+5. Share if needed
+
+### "Delete files"
 1. Run bootstrap
-2. Upload with Google Docs mime type — Drive auto-converts:
-   ```bash
-   curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files" \
-     -H "Authorization: Bearer $TOKEN" \
-     -H "Content-Type: application/json" \
-     -d '{
-       "name": "My Document",
-       "content": "Document content here",
-       "mime_type": "application/vnd.google-apps.document"
-     }'
-   ```
-3. Returns file ID — the doc is now editable in Google Docs
-
-**Native Google mime types for creation:**
-- `application/vnd.google-apps.document` — Google Doc
-- `application/vnd.google-apps.spreadsheet` — Google Sheet (content as CSV)
-- `application/vnd.google-apps.presentation` — Google Slides
+2. Find the files
+3. **Confirm with user** — show file names
+4. Trash (recoverable): `DELETE /google-drive/files/{id}?trash=true`
+5. Or permanent delete: `DELETE /google-drive/files/{id}`
 
 ### "Upload a file to Drive"
 1. Run bootstrap
@@ -412,8 +683,52 @@ curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files" \
   -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
   -d '{"name":"notes.txt","content":"Hello world","mime_type":"text/plain"}'
 
+# Create a folder
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/folders" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"name":"Project Files"}'
+
+# Copy a file
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/copy" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"name":"Copy of Doc"}'
+
+# Share with email
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/share" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"email":"user@example.com","role":"writer"}'
+
+# Move file to folder
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/files/{file_id}/move" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"new_parent_id":"FOLDER_ID"}'
+
+# Trash a file
+curl -s -X DELETE "https://api.atris.ai/api/integrations/google-drive/files/{file_id}?trash=true" \
+  -H "Authorization: Bearer $TOKEN"
+
+# Create a spreadsheet
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"title":"New Sheet"}'
+
+# Format cells (bold header row)
+curl -s -X POST "https://api.atris.ai/api/integrations/google-drive/sheets/{id}/batchUpdate" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"requests":[{"repeatCell":{"range":{"sheetId":0,"startRowIndex":0,"endRowIndex":1},"cell":{"userEnteredFormat":{"textFormat":{"bold":true}}},"fields":"userEnteredFormat.textFormat.bold"}}]}'
+
 # Update an existing file
 curl -s -X PUT "https://api.atris.ai/api/integrations/google-drive/files/{file_id}" \
   -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
   -d '{"content":"Updated content","mime_type":"text/plain"}'
+
+# Create a Google Doc
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"title":"New Doc"}'
+
+# Insert text into a Doc
+curl -s -X POST "https://api.atris.ai/api/integrations/google-docs/documents/DOC_ID/batch-update" \
+  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
+  -d '{"requests":[{"insertText":{"location":{"index":1},"text":"Hello world\n"}}]}'
 ```

package/atris/skills/ramp/SKILL.md

@@ -0,0 +1,295 @@
+---
+name: ramp
+description: Ramp corporate card and spend management. Use when user asks about expenses, transactions, cards, spend analysis, burn rate, or corporate finance. Triggers on ramp, expenses, transactions, spend, corporate card, burn rate.
+version: 1.0.0
+tags:
+  - ramp
+  - finance
+  - integration
+  - expenses
+---
+
+# Ramp
+
+Corporate spend management via Ramp API. No OAuth needed — API key auth.
+
+## Setup
+
+User needs a Ramp API key from their Ramp dashboard (Settings > Developer API).
+
+Store locally (default):
+```bash
+mkdir -p ~/.atris/secrets/ramp
+read -s -p "Ramp API key: " key
+printf '%s' "$key" > ~/.atris/secrets/ramp/API_KEY
+chmod 600 ~/.atris/secrets/ramp/API_KEY
+unset key
+echo "Saved."
+```
+
+The key is available at runtime as `RAMP_API_KEY` env var.
+
+## API Reference
+
+Base URL: `https://api.ramp.com/developer/v1`
+
+Auth header: `Authorization: Bearer $RAMP_API_KEY`
+
+All responses are JSON. List endpoints support `start` (cursor) and `page_size` params for pagination.
+
+---
+
+## Transactions
+
+### List Transactions
+```bash
+curl -s "https://api.ramp.com/developer/v1/transactions?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+Filter params:
+- `from_date` / `to_date` — ISO 8601 (e.g. `2026-03-01`)
+- `department_id` — filter by department
+- `merchant_id` — filter by merchant
+- `user_id` — filter by cardholder
+- `min_amount` / `max_amount` — in cents
+- `state` — PENDING, CLEARED, DECLINED
+
+### Get Transaction
+```bash
+curl -s "https://api.ramp.com/developer/v1/transactions/{transaction_id}" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Cards
+
+### List Cards
+```bash
+curl -s "https://api.ramp.com/developer/v1/cards?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Get Card
+```bash
+curl -s "https://api.ramp.com/developer/v1/cards/{card_id}" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Create Virtual Card
+```bash
+curl -s -X POST "https://api.ramp.com/developer/v1/cards/deferred/virtual" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "display_name": "Marketing Q1",
+    "user_id": "USER_ID",
+    "spending_restrictions": {
+      "amount": 500000,
+      "interval": "MONTHLY",
+      "lock_date": null,
+      "categories": []
+    }
+  }'
+```
+
+### Update Card (limits, name, owner)
+```bash
+curl -s -X PATCH "https://api.ramp.com/developer/v1/cards/{card_id}" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "display_name": "New Name",
+    "spending_restrictions": {"amount": 100000, "interval": "MONTHLY"}
+  }'
+```
+
+### Suspend Card
+```bash
+curl -s -X POST "https://api.ramp.com/developer/v1/cards/{card_id}/deferred/suspension" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{}'
+```
+
+### Terminate Card
+```bash
+curl -s -X POST "https://api.ramp.com/developer/v1/cards/{card_id}/deferred/termination" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{}'
+```
+
+---
+
+## Company
+
+### Get Company Info
+```bash
+curl -s "https://api.ramp.com/developer/v1/business" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Get Company Balance
+```bash
+curl -s "https://api.ramp.com/developer/v1/business/balance" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Users
+
+### List Users
+```bash
+curl -s "https://api.ramp.com/developer/v1/users?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Get User
+```bash
+curl -s "https://api.ramp.com/developer/v1/users/{user_id}" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Departments
+
+### List Departments
+```bash
+curl -s "https://api.ramp.com/developer/v1/departments" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Create Department
+```bash
+curl -s -X POST "https://api.ramp.com/developer/v1/departments" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"name": "Engineering"}'
+```
+
+---
+
+## Bills
+
+### List Bills
+```bash
+curl -s "https://api.ramp.com/developer/v1/bills?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### Create Bill
+```bash
+curl -s -X POST "https://api.ramp.com/developer/v1/bills" \
+  -H "Authorization: Bearer $RAMP_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "amount": {"amount": 150000, "currency_code": "USD"},
+    "vendor_name": "AWS",
+    "invoice_number": "INV-001",
+    "due_date": "2026-04-01",
+    "memo": "March hosting"
+  }'
+```
+
+---
+
+## Reimbursements
+
+### List Reimbursements
+```bash
+curl -s "https://api.ramp.com/developer/v1/reimbursements?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Cashbacks
+
+### List Cashback Payments
+```bash
+curl -s "https://api.ramp.com/developer/v1/cashbacks?page_size=50" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Accounting
+
+### List GL Accounts
+```bash
+curl -s "https://api.ramp.com/developer/v1/accounting/accounts" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+### List Vendors
+```bash
+curl -s "https://api.ramp.com/developer/v1/accounting/vendors" \
+  -H "Authorization: Bearer $RAMP_API_KEY"
+```
+
+---
+
+## Workflows
+
+### "What are we spending on?"
+1. Pull transactions: `GET /transactions?from_date=2026-03-01&to_date=2026-03-31`
+2. Group by merchant name
+3. Sort by total amount descending
+4. Report top 10 merchants and total spend
+
+### "Monthly burn rate"
+1. Pull transactions for last 3 months
+2. Sum cleared transactions per month
+3. Calculate average monthly spend
+4. Get company balance: `GET /business/balance`
+5. Runway = balance / average_monthly_burn
+
+### "Subscription audit"
+1. Pull 90 days of transactions
+2. Find recurring merchants (same merchant, similar amounts, monthly cadence)
+3. Flag: unused (no logins), duplicate (overlapping tools), expensive (>$500/mo)
+4. Report with recommendation per subscription
+
+### "Create a project card"
+1. Find the user: `GET /users` → match by name/email
+2. **Confirm with user: "Create virtual card 'Project X' with $5,000/mo limit for {user}?"**
+3. Create card: `POST /cards/deferred/virtual`
+4. Return card details
+
+### "Department spend breakdown"
+1. List departments: `GET /departments`
+2. For each department, pull transactions filtered by `department_id`
+3. Summarize spend per department
+4. Highlight departments over/under budget
+
+### "Anomaly detection"
+1. Pull last 30 days of transactions
+2. Calculate per-merchant averages from prior 90 days
+3. Flag transactions >2x the merchant average
+4. Flag new merchants with spend >$500
+5. Flag weekend/holiday transactions
+6. Report anomalies with context
+
+## Amounts
+
+All monetary amounts in the Ramp API are in **cents** (integer). $150.00 = 15000.
+
+## Pagination
+
+List endpoints return `{ "data": [...], "page": { "next": "cursor_string" } }`.
+
+To get next page: add `?start=cursor_string` to the request.
+
+## Rate Limits
+
+Ramp applies rate limits per API key. If you get 429, wait and retry with exponential backoff.
+
+## Full API Spec
+
+For the complete OpenAPI spec: `https://docs.ramp.com/openapi/developer-api.json`
+
+For AI-readable docs: `https://docs.ramp.com/llms.txt`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "2.5.1",
+  "version": "2.5.3",
   "description": "atrisDev (atris dev) - CLI for AI coding agents. Works with Claude Code, Cursor, Windsurf. Make any codebase AI-navigable.",
   "main": "bin/atris.js",
   "bin": {