@autoposting.ai/cli 0.3.1 → 0.3.3

package/dist/cli.cjs

@@ -42,11 +42,11 @@ function createError(status, body) {
   if (status >= 500) return new ServerError(message, status, code);
   return new AutopostingError(message, status, code);
 }
-var VERSION, AutopostingError, AuthenticationError, ScopeError, NotFoundError, ValidationError, RateLimitError, ServerError, Resource, AgentsResource, BillingResource, BrandsResource, CarouselsResource, ClipsResource, PostsResource, KbResource, IdeasResource, UsageResource, WebhooksResource, WorkspacesResource, Autoposting;
+var VERSION, AutopostingError, AuthenticationError, ScopeError, NotFoundError, ValidationError, RateLimitError, ServerError, Resource, MediaResource, AgentsResource, BillingResource, BrandsResource, CarouselsResource, ClipsResource, PostsResource, KbResource, IdeasResource, UsageResource, WebhooksResource, WorkspacesResource, IDEMPOTENT_METHODS, RETRYABLE_STATUS, sleep, Autoposting;
 var init_dist = __esm({
   "../sdk/dist/index.mjs"() {
     "use strict";
-    VERSION = "0.3.1";
+    VERSION = "0.3.3";
     AutopostingError = class extends Error {
       status;
       code;
@@ -92,6 +92,15 @@ var init_dist = __esm({
         return this.client.request("DELETE", path2);
       }
     };
+    MediaResource = class extends Resource {
+      /** POST /media/upload — multipart/form-data, ≤20MB, image/* | video/*. */
+      upload(file) {
+        const form = new FormData();
+        const blob = file.data instanceof Blob ? file.data : new Blob([file.data], { type: file.contentType });
+        form.append("file", blob, file.filename);
+        return this.client.request("POST", "/media/upload", form);
+      }
+    };
     AgentsResource = class extends Resource {
       /** GET /agents — backend returns `{ items, total, limit, offset }`. */
       list() {
@@ -233,6 +242,10 @@ var init_dist = __esm({
       schedule(id, scheduledAt) {
         return this.client.request("PUT", `/posts/${id}/schedule`, { scheduledAt });
       }
+      /** PUT /posts/:id/schedule with { cancel: true } — returns the post to draft. */
+      unschedule(id) {
+        return this.client.request("PUT", `/posts/${id}/schedule`, { cancel: true });
+      }
       retry(id) {
         return this.client.request("POST", `/posts/${id}/retry`);
       }
@@ -324,9 +337,17 @@ var init_dist = __esm({
       }
       /**
        * GET /orgs — backend returns `{ organizations, activeOrgId }`, not a bare array.
-       * NOTE: this route is session-only (better-auth session); an API key receives 401.
+       * This route is session-only (better-auth session); an API key receives a bare 401,
+       * so guard up front with accurate guidance instead of an opaque "Unauthorized".
        */
       list() {
+        if (this.client.authSource === "api-key") {
+          return Promise.reject(
+            new Error(
+              "Listing workspaces requires session auth. An API key is scoped to a single workspace and cannot list organizations \u2014 manage workspaces from the web dashboard."
+            )
+          );
+        }
         return this.get("/orgs");
       }
       switchWorkspace(id) {
@@ -340,6 +361,9 @@ var init_dist = __esm({
         return this.client.request("PUT", "/orgs/active", { organizationId: id });
       }
     };
+    IDEMPOTENT_METHODS = /* @__PURE__ */ new Set(["GET", "PUT", "DELETE"]);
+    RETRYABLE_STATUS = /* @__PURE__ */ new Set([500, 502, 503, 504]);
+    sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
     Autoposting = class {
       /** @internal Not part of the public API — use SDK methods to make requests. */
       _apiKey;
@@ -348,6 +372,9 @@ var init_dist = __esm({
       extraHeaders;
       /** Indicates how the client was authenticated; used by WorkspacesResource. */
       authSource;
+      maxRetries;
+      retryBaseMs;
+      media;
       agents;
       billing;
       brands;
@@ -371,6 +398,9 @@ var init_dist = __esm({
         this.timeout = config.timeout ?? 3e4;
         this.extraHeaders = config.headers ?? {};
         this.authSource = config.authSource ?? "api-key";
+        this.maxRetries = Math.max(0, config.maxRetries ?? 2);
+        this.retryBaseMs = Math.max(0, config.retryBaseMs ?? 300);
+        this.media = new MediaResource(this);
         this.agents = new AgentsResource(this);
         this.billing = new BillingResource(this);
         this.brands = new BrandsResource(this);
@@ -383,7 +413,42 @@ var init_dist = __esm({
         this.webhooks = new WebhooksResource(this);
         this.workspaces = new WorkspacesResource(this);
       }
+      /**
+       * GET /auth/profile — resolve the server-side identity behind the current credential.
+       * Validates the key (401 on reject) and returns who/what it's scoped to.
+       */
+      getProfile() {
+        return this.request("GET", "/auth/profile");
+      }
+      /**
+       * Public entry point. Retries idempotent requests (GET/PUT/DELETE) on transient
+       * failures — network errors, timeouts, and 5xx — with exponential backoff + jitter.
+       * Non-idempotent methods (POST/PATCH) are never retried, to avoid duplicate side effects.
+       */
       async request(method, path2, body, query) {
+        let lastErr;
+        for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
+          if (attempt > 0) {
+            const backoff = this.retryBaseMs * 2 ** (attempt - 1);
+            await sleep(backoff + Math.floor(Math.random() * this.retryBaseMs));
+          }
+          try {
+            return await this._send(method, path2, body, query);
+          } catch (err) {
+            lastErr = err;
+            if (attempt < this.maxRetries && this.isRetryable(method, err)) continue;
+            throw err;
+          }
+        }
+        throw lastErr;
+      }
+      isRetryable(method, err) {
+        if (!IDEMPOTENT_METHODS.has(method)) return false;
+        if (!(err instanceof AutopostingError)) return false;
+        if (err.code === "NETWORK_ERROR" || err.code === "TIMEOUT") return true;
+        return RETRYABLE_STATUS.has(err.status);
+      }
+      async _send(method, path2, body, query) {
         let url = `${this.baseUrl}${path2}`;
         if (query && Object.keys(query).length > 0) {
           const params = new URLSearchParams();
@@ -1792,7 +1857,7 @@ var OraSpinner = class {
     if (this.instance) {
       this.instance.fail(message);
       this.instance = null;
-    } else {
+    } else if (message) {
       process.stderr.write(`${message}
 `);
     }
@@ -1809,6 +1874,10 @@ var Printer = class {
     this.mode = mode;
   }
   mode;
+  /** True only for human-readable output, where extra hint lines are safe to print. */
+  isTty() {
+    return this.mode === "tty";
+  }
   log(data) {
     const out = formatOutput(data, this.mode);
     if (out !== "") console.log(out);
@@ -1901,7 +1970,7 @@ function createAgentsCommand() {
       }));
       printer.table(rows, ["id", "name", "type", "brand", "frequency", "enabled"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -1917,7 +1986,7 @@ function createAgentsCommand() {
       spinner.stop();
       printer.log(agent);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -1943,7 +2012,7 @@ function createAgentsCommand() {
         spinner.stop();
         printer.log(agent);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode(err));
       }
@@ -1967,7 +2036,7 @@ function createAgentsCommand() {
         spinner.stop();
         printer.log(agent);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode(err));
       }
@@ -1988,7 +2057,7 @@ function createAgentsCommand() {
       spinner.stop();
       printer.log(`Agent "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -2004,7 +2073,7 @@ function createAgentsCommand() {
       spinner.stop();
       printer.log({ runId: queued.runId, status: queued.status });
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -2020,7 +2089,7 @@ function createAgentsCommand() {
       spinner.stop();
       printer.log(agent);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -2042,7 +2111,7 @@ function createAgentsCommand() {
       }));
       printer.table(rows, ["id", "status", "output", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode(err));
     }
@@ -2287,7 +2356,7 @@ function createBillingCommand() {
         ["plan", "status", "cycle", "accounts", "credits", "renews", "trial ends"]
       );
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode2(err));
     }
@@ -2320,7 +2389,7 @@ function createBillingCommand() {
         printer.table(usageRows, ["date", "description", "amount", "type"]);
       }
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode2(err));
     }
@@ -2331,6 +2400,24 @@ function createBillingCommand() {
 // src/commands/brands.ts
 var import_commander4 = require("commander");
 init_dist();
+function tokenStatus(c, now = Date.now()) {
+  if (!c.connected) return "\u2014";
+  if (c.refreshError) return "expired";
+  if (c.expiresAt) {
+    const expMs = Date.parse(c.expiresAt);
+    if (Number.isNaN(expMs) || expMs <= now) return "expired";
+  }
+  return "ok";
+}
+function buildAuthStatusRow(c, now = Date.now()) {
+  return {
+    platform: c.platform,
+    connected: c.connected ? "yes" : "no",
+    username: c.platformUsername ?? "\u2014",
+    "token status": tokenStatus(c, now),
+    expires: c.expiresAt ?? "\u2014"
+  };
+}
 function createBrandsCommand() {
   const brands = new import_commander4.Command("brands").description("Manage brands");
   brands.command("list").description("List all brands").action(async (_opts, cmd) => {
@@ -2350,7 +2437,7 @@ function createBrandsCommand() {
       }));
       printer.table(rows, ["slug", "name", "platforms", "timezone"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2366,7 +2453,7 @@ function createBrandsCommand() {
       spinner.stop();
       printer.log(brand);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2385,7 +2472,7 @@ function createBrandsCommand() {
       spinner.stop();
       printer.log(brand);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2404,7 +2491,7 @@ function createBrandsCommand() {
       spinner.stop();
       printer.log(brand);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2424,7 +2511,7 @@ function createBrandsCommand() {
       spinner.stop();
       printer.log(`Brand "${slug}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2438,15 +2525,10 @@ function createBrandsCommand() {
       const client = new Autoposting({ apiKey: cred.apiKey });
       const connections = await client.brands.authStatus(slug);
       spinner.stop();
-      const rows = connections.map((c) => ({
-        platform: c.platform,
-        connected: c.connected ? "yes" : "no",
-        username: c.username ?? "\u2014",
-        "token status": c.tokenExpired === true ? "expired" : c.connected ? "ok" : "\u2014"
-      }));
-      printer.table(rows, ["platform", "connected", "username", "token status"]);
+      const rows = connections.map((c) => buildAuthStatusRow(c));
+      printer.table(rows, ["platform", "connected", "username", "token status", "expires"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(exitCodeFromError(err));
     }
@@ -2482,7 +2564,7 @@ function createCarouselsCommand() {
       }));
       printer.table(rows, ["id", "title", "slides", "status", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2498,7 +2580,7 @@ function createCarouselsCommand() {
       spinner.stop();
       printer.log(carousel);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2516,7 +2598,7 @@ function createCarouselsCommand() {
       spinner.stop();
       printer.log(carousel);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2536,7 +2618,7 @@ function createCarouselsCommand() {
       spinner.stop();
       printer.log(carousel);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2552,7 +2634,7 @@ function createCarouselsCommand() {
       spinner.stop();
       printer.log(result);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2572,7 +2654,7 @@ function createCarouselsCommand() {
       spinner.stop();
       printer.log(`Carousel "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode3(err));
     }
@@ -2607,7 +2689,7 @@ function createClipsCommand() {
       }));
       printer.table(rows, ["id", "name", "status", "duration"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2623,7 +2705,7 @@ function createClipsCommand() {
       spinner.stop();
       printer.log(clip);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2644,7 +2726,7 @@ function createClipsCommand() {
       spinner.stop();
       printer.log(clip);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2663,7 +2745,7 @@ function createClipsCommand() {
       spinner.stop();
       printer.log({ clipId });
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2679,7 +2761,7 @@ function createClipsCommand() {
       spinner.stop();
       printer.log({ jobIds, activeJobIds, reusedJobIds });
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2699,7 +2781,7 @@ function createClipsCommand() {
       spinner.stop();
       printer.log(`Clip "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode4(err));
     }
@@ -2710,16 +2792,226 @@ function createClipsCommand() {
 // src/commands/posts.ts
 var import_commander7 = require("commander");
 init_dist();
+var import_promises = __toESM(require("fs/promises"));
+var import_node_path2 = __toESM(require("path"));
+
+// src/lib/media-flags.ts
+var import_node_fs2 = require("fs");
 var VALID_PLATFORMS = ["x", "linkedin", "instagram", "threads", "youtube"];
+var EXT_TO_MIME = {
+  jpg: "image/jpeg",
+  jpeg: "image/jpeg",
+  png: "image/png",
+  gif: "image/gif",
+  webp: "image/webp",
+  mp4: "video/mp4",
+  mov: "video/quicktime",
+  webm: "video/webm"
+};
+function extToMime(filename) {
+  const ext = filename.split(".").pop()?.toLowerCase() ?? "";
+  const mime = EXT_TO_MIME[ext];
+  if (!mime) {
+    throw new Error(
+      `Unsupported file extension ".${ext || "(none)"}" in "${filename}". Supported: ${Object.keys(EXT_TO_MIME).join(", ")}`
+    );
+  }
+  return mime;
+}
+function parsePairs(flag, vals) {
+  const result = {};
+  for (const val of vals) {
+    const eqIdx = val.indexOf("=");
+    if (eqIdx < 1) {
+      throw new Error(`${flag}: expected "platform=value" format, got "${val}"`);
+    }
+    const p = val.slice(0, eqIdx).trim();
+    const v = val.slice(eqIdx + 1);
+    if (!VALID_PLATFORMS.includes(p)) {
+      throw new Error(`${flag}: unknown platform "${p}". Valid: ${VALID_PLATFORMS.join(", ")}`);
+    }
+    result[p] = v;
+  }
+  return result;
+}
+function parsePlatformMediaPairs(flag, vals) {
+  const result = {};
+  for (const val of vals) {
+    const eqIdx = val.indexOf("=");
+    if (eqIdx < 1) {
+      throw new Error(`${flag}: expected "platform=path[,path...]" format, got "${val}"`);
+    }
+    const p = val.slice(0, eqIdx).trim();
+    const paths = val.slice(eqIdx + 1).split(",").map((s) => s.trim()).filter(Boolean);
+    if (!VALID_PLATFORMS.includes(p)) {
+      throw new Error(`${flag}: unknown platform "${p}". Valid: ${VALID_PLATFORMS.join(", ")}`);
+    }
+    result[p] = paths;
+  }
+  return result;
+}
+function validateMediaExtensions(paths) {
+  for (const p of paths) extToMime(p);
+}
+function validateMediaCount(paths) {
+  if (paths.length > 10) {
+    throw new Error(`--media accepts at most 10 files (received ${paths.length}).`);
+  }
+}
+function validateMediaPaths(paths) {
+  for (const p of paths) {
+    if (!(0, import_node_fs2.existsSync)(p)) {
+      throw new Error(`Media file not found: "${p}"`);
+    }
+  }
+}
+function alignAltText(mediaPaths, altTexts) {
+  if (altTexts.length > mediaPaths.length) {
+    throw new Error(
+      `--alt-text has more values (${altTexts.length}) than --media (${mediaPaths.length}). Alt text aligns to media by index.`
+    );
+  }
+  return mediaPaths.map((_, i) => altTexts[i]);
+}
+function buildYoutubeOptions(opts) {
+  const { ytTitle, ytDescription, ytTags, ytPrivacy, ytCategory, ytMadeForKids } = opts;
+  const o = {};
+  if (ytTitle) o.title = ytTitle;
+  if (ytDescription) o.description = ytDescription;
+  if (ytTags) o.tags = ytTags.split(",").map((t) => t.trim()).filter(Boolean);
+  if (ytPrivacy) o.privacyStatus = ytPrivacy;
+  if (ytCategory) o.categoryId = ytCategory;
+  if (ytMadeForKids !== void 0) o.madeForKids = ytMadeForKids;
+  return Object.keys(o).length > 0 ? o : void 0;
+}
+function buildInstagramOptions(opts) {
+  const { igReel, igShareToFeed, igCoverUrl, igThumbOffsetMs, igCollaborators } = opts;
+  const hasAnyReelFlag = igReel !== void 0 || igShareToFeed !== void 0 || igCoverUrl !== void 0 || igThumbOffsetMs !== void 0 || igCollaborators !== void 0;
+  if (!hasAnyReelFlag) return void 0;
+  const reel = {};
+  if (igShareToFeed !== void 0) reel.shareToFeed = igShareToFeed;
+  if (igCoverUrl) reel.coverUrl = igCoverUrl;
+  if (igThumbOffsetMs !== void 0) {
+    const n = Number(igThumbOffsetMs);
+    if (!Number.isFinite(n) || n < 0) {
+      throw new Error(
+        `--ig-thumb-offset-ms must be a non-negative number (received "${igThumbOffsetMs}")`
+      );
+    }
+    reel.thumbOffsetMs = n;
+  }
+  if (igCollaborators) {
+    reel.collaborators = igCollaborators.split(",").map((s) => s.trim()).filter(Boolean);
+  }
+  return { reel };
+}
+function buildThreadsOptions(opts) {
+  const { threadsReplyTo, threadsReplyControl } = opts;
+  if (!threadsReplyTo && !threadsReplyControl) return void 0;
+  const o = {};
+  if (threadsReplyTo) o.replyToId = threadsReplyTo;
+  if (threadsReplyControl) o.replyControl = threadsReplyControl;
+  return o;
+}
+
+// src/lib/account-select.ts
+var VALID_PLATFORMS2 = ["x", "linkedin", "instagram", "threads", "youtube"];
+async function resolveTargetAccounts({
+  brandSlug,
+  platforms,
+  accountFlags,
+  client,
+  isTty
+}) {
+  const accountMap = {};
+  for (const flag of accountFlags) {
+    const eqIdx = flag.indexOf("=");
+    if (eqIdx < 1) {
+      throw Object.assign(
+        new Error(`--account: expected "platform=handle|id" format, got "${flag}"`),
+        { exitCode: 1 }
+      );
+    }
+    const p = flag.slice(0, eqIdx).trim();
+    if (!VALID_PLATFORMS2.includes(p)) {
+      throw Object.assign(
+        new Error(`--account: unknown platform "${p}". Valid: ${VALID_PLATFORMS2.join(", ")}`),
+        { exitCode: 1 }
+      );
+    }
+    accountMap[p] = flag.slice(eqIdx + 1).trim();
+  }
+  const connections = await client.brands.authStatus(brandSlug);
+  const byPlatform = {};
+  for (const conn of connections) {
+    if (!conn.connected) continue;
+    const p = conn.platform;
+    if (!byPlatform[p]) byPlatform[p] = [];
+    byPlatform[p].push(conn);
+  }
+  const result = {};
+  for (const platform of platforms) {
+    const accounts = byPlatform[platform] ?? [];
+    const specifiedValue = accountMap[platform];
+    if (specifiedValue !== void 0) {
+      const normalized = specifiedValue.startsWith("@") ? specifiedValue.slice(1) : specifiedValue;
+      const match = accounts.find(
+        (a) => a.platformUsername?.toLowerCase() === normalized.toLowerCase() || a.platformUserId === specifiedValue
+      );
+      if (!match?.platformUserId) {
+        const valid = accounts.map((a) => `  @${a.platformUsername ?? "?"} (${a.platformUserId ?? "?"})`).join("\n");
+        throw Object.assign(
+          new Error(
+            `--account: unknown ${platform} account "${specifiedValue}".
+Connected accounts:
+${valid || "  (none)"}`
+          ),
+          { exitCode: 1 }
+        );
+      }
+      if (!result[platform]) result[platform] = [];
+      result[platform].push(match.platformUserId);
+    } else if (accounts.length >= 2) {
+      if (isTty) {
+        const { checkbox } = await import("@inquirer/prompts");
+        const choices = accounts.map((a) => ({
+          name: `@${a.platformUsername ?? "?"} (${a.platformUserId ?? "?"})`,
+          value: a.platformUserId ?? ""
+        }));
+        const selected = await checkbox({
+          message: `Multiple ${platform} accounts connected \u2014 select which to post to:`,
+          choices
+        });
+        const valid = selected.filter(Boolean);
+        if (valid.length > 0) result[platform] = valid;
+      } else {
+        const list = accounts.map((a) => `  @${a.platformUsername ?? "?"} (${a.platformUserId ?? "?"})`).join("\n");
+        throw Object.assign(
+          new Error(
+            `Multiple ${platform} accounts connected but no --account specified (non-interactive mode).
+Connected accounts:
+${list}
+Pass --account ${platform}=<handle|id> to select.`
+          ),
+          { exitCode: 1 }
+        );
+      }
+    }
+  }
+  return result;
+}
+
+// src/commands/posts.ts
+var VALID_PLATFORMS3 = ["x", "linkedin", "instagram", "threads", "youtube"];
 function parsePlatforms(raw) {
   const parts = raw.split(",").map((p) => p.trim()).filter(Boolean);
   if (parts.length === 0) {
     throw new Error("No platforms provided. Pass a comma-separated list, e.g. --platforms x,linkedin");
   }
-  const invalid = parts.filter((p) => !VALID_PLATFORMS.includes(p));
+  const invalid = parts.filter((p) => !VALID_PLATFORMS3.includes(p));
   if (invalid.length > 0) {
     throw new Error(
-      `Unsupported platform(s): ${invalid.join(", ")}. Valid platforms: ${VALID_PLATFORMS.join(", ")}`
+      `Unsupported platform(s): ${invalid.join(", ")}. Valid platforms: ${VALID_PLATFORMS3.join(", ")}`
     );
   }
   return parts;
@@ -2732,11 +3024,17 @@ function parsePositiveInt(value, flag) {
   return n;
 }
 function validateScheduledAt(value) {
-  if (Number.isNaN(Date.parse(value)) || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}/.test(value)) {
+  const ms = Date.parse(value);
+  if (Number.isNaN(ms) || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}/.test(value)) {
     throw new Error(
       `--at must be a valid ISO 8601 datetime, e.g. 2026-06-30T14:00:00Z (received "${value}").`
     );
   }
+  if (ms <= Date.now()) {
+    throw new Error(
+      `--at must be in the future (received "${value}", which is in the past). A past schedule time publishes immediately.`
+    );
+  }
   return value;
 }
 function resolveExitCode5(err) {
@@ -2770,7 +3068,7 @@ function createPostsCommand() {
       }));
       printer.table(rows, ["id", "brand", "status", "platforms", "text", "scheduledAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2786,7 +3084,7 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(post);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2794,25 +3092,109 @@ function createPostsCommand() {
   posts.command("create").description("Create a new post").requiredOption("--brand <slug>", "Brand slug").requiredOption("--text <text>", "Post text content").requiredOption("--platforms <list>", "Comma-separated platforms (e.g. x,linkedin)").option("--at <iso>", "Schedule date/time (ISO 8601)").option(
     "--thread <text...>",
     "Additional posts appended after --text to form a thread (X/Threads only, max 25)"
-  ).action(
+  ).option("--media <path...>", "Media file paths to attach (max 10)").option("--alt-text <text...>", "Alt text for --media files, aligned by index").option("--platform-text <pairs...>", "Per-platform text, e.g. x=Hello linkedin=World").option("--platform-media <pairs...>", "Per-platform media, e.g. instagram=photo.jpg x=banner.png").option("--yt-title <t>", "YouTube video title").option("--yt-description <d>", "YouTube video description").option("--yt-tags <list>", "YouTube tags (comma-separated)").option("--yt-privacy <v>", "YouTube privacy status (public|unlisted|private)").option("--yt-category <id>", "YouTube category ID").option("--yt-made-for-kids", "Mark YouTube video as made for kids").option("--ig-reel", "Post as an Instagram Reel").option("--ig-share-to-feed", "Share Reel to feed").option("--ig-cover-url <url>", "Reel cover image URL").option("--ig-thumb-offset-ms <n>", "Reel thumbnail offset in milliseconds").option("--ig-collaborators <list>", "Reel collaborator handles (comma-separated)").option("--threads-reply-to <id>", "Threads post ID to reply to").option("--threads-reply-control <v>", "Threads reply control (everyone|accounts_you_follow|mentioned_only)").option("--account <p=handle|id...>", "Target specific account per platform, e.g. x=@handle").action(
     async (opts, cmd) => {
       const globals = cmd.optsWithGlobals();
       const printer = createPrinter(globals);
-      const spinner = printer.spinner("Creating post\u2026");
+      let spinner;
       try {
         const cred = resolveAuth({ apiKey: globals.apiKey });
         const client = new Autoposting({ apiKey: cred.apiKey });
+        const platforms = parsePlatforms(opts.platforms);
+        const scheduledAt = opts.at ? validateScheduledAt(opts.at) : void 0;
+        if (opts.media && opts.media.length > 0) {
+          validateMediaCount(opts.media);
+          validateMediaPaths(opts.media);
+          validateMediaExtensions(opts.media);
+        }
+        const platformTexts = opts.platformText && opts.platformText.length > 0 ? parsePairs("--platform-text", opts.platformText) : void 0;
+        const platformMediaPaths = opts.platformMedia && opts.platformMedia.length > 0 ? parsePlatformMediaPairs("--platform-media", opts.platformMedia) : {};
+        for (const paths of Object.values(platformMediaPaths)) {
+          validateMediaPaths(paths);
+          validateMediaExtensions(paths);
+        }
+        const altTexts = alignAltText(opts.media ?? [], opts.altText ?? []);
+        const youtubeOptions = buildYoutubeOptions({
+          ytTitle: opts.ytTitle,
+          ytDescription: opts.ytDescription,
+          ytTags: opts.ytTags,
+          ytPrivacy: opts.ytPrivacy,
+          ytCategory: opts.ytCategory,
+          ytMadeForKids: opts.ytMadeForKids
+        });
+        const instagramOptions = buildInstagramOptions({
+          igReel: opts.igReel,
+          igShareToFeed: opts.igShareToFeed,
+          igCoverUrl: opts.igCoverUrl,
+          igThumbOffsetMs: opts.igThumbOffsetMs,
+          igCollaborators: opts.igCollaborators
+        });
+        const threadsOptions = buildThreadsOptions({
+          threadsReplyTo: opts.threadsReplyTo,
+          threadsReplyControl: opts.threadsReplyControl
+        });
+        const targetAccountIds = await resolveTargetAccounts({
+          brandSlug: opts.brand,
+          platforms,
+          accountFlags: opts.account ?? [],
+          client,
+          // Picker reads stdin — gate on a real interactive terminal, not the
+          // output mode (printer.isTty() is true even when stdout/stdin is piped).
+          isTty: Boolean(process.stdin.isTTY)
+        });
+        spinner = printer.spinner("Creating post\u2026");
+        const mediaInputs = [];
+        for (let i = 0; i < (opts.media ?? []).length; i++) {
+          const filePath = opts.media[i];
+          const data = await import_promises.default.readFile(filePath);
+          const filename = import_node_path2.default.basename(filePath);
+          const contentType = extToMime(filename);
+          const uploaded = await client.media.upload({
+            data: new Uint8Array(data),
+            filename,
+            contentType
+          });
+          mediaInputs.push({
+            url: uploaded.url,
+            type: uploaded.type,
+            ...altTexts[i] ? { altText: altTexts[i] } : {}
+          });
+        }
+        const platformMediaResult = {};
+        for (const [p, paths] of Object.entries(platformMediaPaths)) {
+          const uploads = [];
+          for (const filePath of paths) {
+            const data = await import_promises.default.readFile(filePath);
+            const filename = import_node_path2.default.basename(filePath);
+            const contentType = extToMime(filename);
+            const uploaded = await client.media.upload({
+              data: new Uint8Array(data),
+              filename,
+              contentType
+            });
+            uploads.push({ url: uploaded.url, type: uploaded.type });
+          }
+          platformMediaResult[p] = uploads;
+        }
         const post = await client.posts.create({
           brandSlug: opts.brand,
           text: opts.text,
-          platforms: parsePlatforms(opts.platforms),
-          ...opts.at ? { scheduledAt: validateScheduledAt(opts.at) } : {},
-          ...opts.thread && opts.thread.length > 0 ? { thread: opts.thread } : {}
+          platforms,
+          ...scheduledAt ? { scheduledAt } : {},
+          ...opts.thread && opts.thread.length > 0 ? { thread: opts.thread } : {},
+          ...mediaInputs.length > 0 ? { media: mediaInputs } : {},
+          ...Object.keys(platformMediaResult).length > 0 ? { platformMedia: platformMediaResult } : {},
+          ...platformTexts && Object.keys(platformTexts).length > 0 ? { platformTexts } : {},
+          ...Object.keys(targetAccountIds).length > 0 ? { targetAccountIds } : {},
+          ...instagramOptions ? { instagramOptions } : {},
+          ...threadsOptions ? { threadsOptions } : {},
+          ...youtubeOptions ? { youtubeOptions } : {},
+          source: "cli"
         });
         spinner.stop();
         printer.log(post);
       } catch (err) {
-        spinner.stop();
+        spinner?.fail();
         printer.error(err);
         process.exit(resolveExitCode5(err));
       }
@@ -2834,7 +3216,7 @@ function createPostsCommand() {
         spinner.stop();
         printer.log(post);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode5(err));
       }
@@ -2855,8 +3237,11 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(`Post "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
+      if (!(err instanceof NotFoundError) && printer.isTty()) {
+        printer.error(`The post may not have been deleted \u2014 verify with: ap posts get "${id}"`);
+      }
       process.exit(resolveExitCode5(err));
     }
   });
@@ -2871,23 +3256,31 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(post);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
   });
-  posts.command("schedule <id>").description("Schedule a post for a specific time").requiredOption("--at <iso>", "ISO 8601 datetime to schedule the post").action(async (id, opts, cmd) => {
+  posts.command("schedule <id>").description("Schedule a post for a specific time, or --cancel to unschedule it").option("--at <iso>", "ISO 8601 datetime to schedule the post").option("--cancel", "Unschedule the post (return it to draft)").action(async (id, opts, cmd) => {
     const globals = cmd.optsWithGlobals();
     const printer = createPrinter(globals);
-    const spinner = printer.spinner(`Scheduling post "${id}"\u2026`);
+    const spinner = printer.spinner(
+      opts.cancel ? `Unscheduling post "${id}"\u2026` : `Scheduling post "${id}"\u2026`
+    );
     try {
+      if (opts.cancel && opts.at) {
+        throw new Error("Cannot use --at together with --cancel \u2014 choose one.");
+      }
+      if (!opts.cancel && !opts.at) {
+        throw new Error("Provide either --at <iso> to schedule, or --cancel to unschedule.");
+      }
       const cred = resolveAuth({ apiKey: globals.apiKey });
       const client = new Autoposting({ apiKey: cred.apiKey });
-      const post = await client.posts.schedule(id, validateScheduledAt(opts.at));
+      const post = opts.cancel ? await client.posts.unschedule(id) : await client.posts.schedule(id, validateScheduledAt(opts.at));
       spinner.stop();
       printer.log(post);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2903,7 +3296,7 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(post);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2919,7 +3312,7 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(post);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2935,7 +3328,7 @@ function createPostsCommand() {
       spinner.stop();
       printer.log(result);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode5(err));
     }
@@ -2970,7 +3363,7 @@ function createKbCommand() {
       }));
       printer.table(rows, ["id", "name", "docs", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -2986,7 +3379,7 @@ function createKbCommand() {
       spinner.stop();
       printer.log(result);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3002,7 +3395,7 @@ function createKbCommand() {
       spinner.stop();
       printer.log(result);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3022,7 +3415,7 @@ function createKbCommand() {
       spinner.stop();
       printer.log(`Knowledge base "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3044,7 +3437,7 @@ function createKbCommand() {
       }));
       printer.table(rows, ["kind", "score", "uri", "content"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3060,7 +3453,7 @@ function createKbCommand() {
       spinner.stop();
       printer.log(doc);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3083,7 +3476,7 @@ function createKbCommand() {
       }));
       printer.table(rows, ["id", "name", "type", "status", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode6(err));
     }
@@ -3139,7 +3532,7 @@ function createIdeasCommand() {
       }));
       printer.table(rows, ["id", "platform", "score", "title"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode7(err));
     }
@@ -3163,7 +3556,7 @@ function createIdeasCommand() {
       }));
       printer.table(rows, ["id", "topic", "platform", "score", "status", "title"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode7(err));
     }
@@ -3184,7 +3577,7 @@ function createIdeasCommand() {
         spinner.stop();
         printer.log(`Enrichment queued. Job ID: ${jobId}`);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode7(err));
       }
@@ -3205,7 +3598,7 @@ function createIdeasCommand() {
       spinner.stop();
       printer.log(`Idea "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode7(err));
     }
@@ -3252,7 +3645,7 @@ function createUsageCommand() {
       }));
       printer.table(sourceRows, ["source", "posts"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode8(err));
     }
@@ -3288,7 +3681,7 @@ function createWebhooksCommand() {
       }));
       printer.table(rows, ["id", "url", "events", "active", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode9(err));
     }
@@ -3304,7 +3697,7 @@ function createWebhooksCommand() {
       spinner.stop();
       printer.log(webhook);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode9(err));
     }
@@ -3325,7 +3718,7 @@ function createWebhooksCommand() {
         spinner.stop();
         printer.log(webhook);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode9(err));
       }
@@ -3347,7 +3740,7 @@ function createWebhooksCommand() {
         spinner.stop();
         printer.log(webhook);
       } catch (err) {
-        spinner.stop();
+        spinner.fail();
         printer.error(err);
         process.exit(resolveExitCode9(err));
       }
@@ -3368,7 +3761,7 @@ function createWebhooksCommand() {
       spinner.stop();
       printer.log(`Webhook "${id}" deleted.`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode9(err));
     }
@@ -3386,7 +3779,7 @@ function createWebhooksCommand() {
         `Test event sent to webhook "${id}" \u2014 delivered: ${result.delivered ? "yes" : "no"} (HTTP ${result.httpStatus}).`
       );
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode9(err));
     }
@@ -3422,7 +3815,7 @@ function createWorkspacesCommand() {
       }));
       printer.table(rows, ["id", "name", "slug", "active", "createdAt"]);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode10(err));
     }
@@ -3433,13 +3826,12 @@ function createWorkspacesCommand() {
     const spinner = printer.spinner(`Switching to workspace "${id}"\u2026`);
     try {
       const cred = resolveAuth({ apiKey: globals.apiKey });
-      const authSource = cred.source === "flag" || cred.source === "env" || cred.source === "stored" ? "api-key" : "session";
-      const client = new Autoposting({ apiKey: cred.apiKey, authSource });
+      const client = new Autoposting({ apiKey: cred.apiKey });
       await client.workspaces.switchWorkspace(id);
       spinner.stop();
       printer.log(`Switched to workspace "${id}".`);
     } catch (err) {
-      spinner.stop();
+      spinner.fail();
       printer.error(err);
       process.exit(resolveExitCode10(err));
     }
@@ -3450,7 +3842,7 @@ function createWorkspacesCommand() {
 // src/commands/doctor.ts
 var import_commander13 = require("commander");
 init_dist();
-var import_node_fs2 = __toESM(require("fs"));
+var import_node_fs3 = __toESM(require("fs"));
 var API_HEALTH_URL = "https://app.autoposting.ai/api-proxy/health";
 async function runChecks() {
   const results = [];
@@ -3470,7 +3862,7 @@ async function runChecks() {
   }
   const credPath = getCredentialsPath();
   try {
-    const stat = import_node_fs2.default.statSync(credPath);
+    const stat = import_node_fs3.default.statSync(credPath);
     const mode = stat.mode & 511;
     const isSecure = mode === 384;
     results.push({
@@ -3536,9 +3928,10 @@ function createWhoamiCommand() {
     }
     const masked = `${cred.apiKey.slice(0, 8)}${"*".repeat(Math.max(0, cred.apiKey.length - 8))}`;
     let validity = "unverified";
+    let identity;
     try {
-      const client = new Autoposting({ apiKey: cred.apiKey });
-      await client.usage.summary();
+      const client = new Autoposting({ apiKey: cred.apiKey, maxRetries: 0 });
+      identity = await client.getProfile();
       validity = "valid";
     } catch (err) {
       const code = exitCodeFromError(err);
@@ -3555,6 +3948,11 @@ function createWhoamiCommand() {
         valid: validity === "valid",
         validity
       };
+      if (identity?.orgId) {
+        out.orgId = identity.orgId;
+        out.authType = identity.authType;
+        if (identity.email) out.email = identity.email;
+      }
       if (cred.source === "stored") {
         out.profile = profileName;
         if (email) out.email = email;
@@ -3568,6 +3966,10 @@ function createWhoamiCommand() {
       console.log(`Profile: ${profileName}`);
       if (email) console.log(`Email:   ${email}`);
     }
+    if (identity?.orgId) {
+      console.log(`Org:     ${identity.orgId}`);
+      console.log(`Auth:    ${identity.authType}`);
+    }
     const tag = validity === "valid" ? "\u2713 valid" : validity === "rejected" ? "\u2717 rejected by server" : "\u26A0 unverified (could not reach server)";
     console.log(`API key: ${masked}  ${tag}`);
     process.exitCode = exitCode;