@phamvuhoang/otto-core 0.19.0 → 0.20.0

package/dist/threads-api.js

@@ -0,0 +1,101 @@
+/**
+ * Threads (Meta) publishing client for the P12 public journal (issue #67).
+ * Mirrors linear-api.ts: injectable fetch + credentials from env or
+ * ~/.config/otto/threads.json. The Threads Graph API publishes in two steps —
+ * create a TEXT container, then publish it.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const defaultAuthDeps = {
+    env: process.env,
+    readFile: (p) => {
+        try {
+            return readFileSync(p, "utf8");
+        }
+        catch {
+            return null;
+        }
+    },
+    home: homedir(),
+};
+/** Canonical location of the stored Threads credentials (outside any repo). */
+export function threadsConfigPath(home) {
+    return join(home, ".config", "otto", "threads.json");
+}
+/**
+ * Resolve a Threads token + user id with precedence `OTTO_THREADS_TOKEN` +
+ * `OTTO_THREADS_USER_ID` → `~/.config/otto/threads.json` (`{ token, userId }`).
+ * Returns null when no source yields both a token and a user id.
+ */
+export function resolveThreadsAuth(deps = defaultAuthDeps) {
+    const token = deps.env.OTTO_THREADS_TOKEN?.trim();
+    const userId = deps.env.OTTO_THREADS_USER_ID?.trim();
+    if (token && userId)
+        return { token, userId, source: "env" };
+    const path = threadsConfigPath(deps.home);
+    const raw = deps.readFile(path);
+    if (raw != null) {
+        try {
+            const o = JSON.parse(raw);
+            if (typeof o.token === "string" &&
+                o.token.trim() &&
+                typeof o.userId === "string" &&
+                o.userId.trim()) {
+                return { token: o.token.trim(), userId: o.userId.trim(), source: path };
+            }
+        }
+        catch {
+            // malformed → no credential from this source
+        }
+    }
+    return null;
+}
+export class ThreadsApiError extends Error {
+    kind;
+    constructor(message, kind) {
+        super(message);
+        this.name = "ThreadsApiError";
+        this.kind = kind;
+    }
+}
+const DEFAULT_BASE = "https://graph.threads.net/v1.0";
+/**
+ * Create a Threads client. The two-step publish: create a TEXT container
+ * (`/{userId}/threads`), then publish it (`/{userId}/threads_publish`). `fetch`
+ * is injectable for tests; errors are classified as auth/network/api.
+ */
+export function createThreadsClient(opts) {
+    const fetchImpl = opts.fetch ?? fetch;
+    const base = opts.baseUrl ?? DEFAULT_BASE;
+    if (!opts.token || !opts.userId) {
+        throw new ThreadsApiError("missing Threads credentials", "auth");
+    }
+    const post = async (url) => {
+        let res;
+        try {
+            res = await fetchImpl(url, { method: "POST" });
+        }
+        catch (e) {
+            throw new ThreadsApiError(`Threads request failed: ${e.message}`, "network");
+        }
+        if (!res.ok) {
+            throw new ThreadsApiError(`Threads API returned ${res.status}`, "api");
+        }
+        const json = (await res.json());
+        if (typeof json.id !== "string") {
+            throw new ThreadsApiError("Threads API response missing id", "api");
+        }
+        return { id: json.id };
+    };
+    return {
+        async publish(text) {
+            const tok = encodeURIComponent(opts.token);
+            const create = `${base}/${opts.userId}/threads?media_type=TEXT&text=${encodeURIComponent(text)}&access_token=${tok}`;
+            const { id: creationId } = await post(create);
+            const publish = `${base}/${opts.userId}/threads_publish?creation_id=${encodeURIComponent(creationId)}&access_token=${tok}`;
+            return post(publish);
+        },
+    };
+}
+//# sourceMappingURL=threads-api.js.map

package/dist/threads-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threads-api.js","sourceRoot":"","sources":["../src/threads-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,MAAM,eAAe,GAAoB;IACvC,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,EAAE,OAAO,EAAE;CAChB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAwB,eAAe;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,KAAK,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0C,CAAC;YACnE,IACE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAC3B,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBACd,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACf,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,IAAI,CAAmB;IACvB,YAAY,OAAe,EAAE,IAAsB;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAID,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAKnC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAA2B,EAAE;QAC1D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CACvB,2BAA4B,CAAW,CAAC,OAAO,EAAE,EACjD,SAAS,CACV,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,eAAe,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAY;YACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;YACrH,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,gCAAgC,kBAAkB,CAAC,UAAU,CAAC,iBAAiB,GAAG,EAAE,CAAC;YAC3H,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phamvuhoang/otto-core",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Claude Code AFK orchestration: iteration loop, native-sandbox runner, template renderer.",
   "type": "module",
   "license": "MIT",

package/templates/journal-screen.md

@@ -0,0 +1,19 @@
+You are a strict pre-publication secrecy reviewer. A note is about to be posted
+publicly by an autonomous coding agent. Your ONLY job is to prevent leaks.
+
+Decide whether the note below is SAFE to post. Treat it as UNSAFE if a reader
+could identify the specific repository, product, company, person, or customer —
+or if it contains code, secrets, paths, URLs, names, or any private/internal
+detail. If there is ANY doubt whatsoever, answer UNSAFE.
+
+Respond with EXACTLY one line and nothing else:
+
+<journal-verdict>SAFE</journal-verdict>
+
+or
+
+<journal-verdict>UNSAFE</journal-verdict>
+
+<note>
+{{ INPUTS }}
+</note>

package/templates/journal-write.md

@@ -0,0 +1,16 @@
+You are _a coding agent's field notes_ — you share short, generic lessons about
+the craft of software work, never about any specific project.
+
+Below is one durable learning. Rewrite it as a SINGLE first-person field note
+(2–4 sentences, under 400 characters) capturing the GENERAL craft lesson.
+
+STRICT RULES:
+
+- No project, product, company, person, file, path, tool, version, or ticket names.
+- No code, commands, URLs, or identifiers of any kind.
+- If the learning cannot be generalized without specifics, output exactly: SKIP
+- Output ONLY the note text (or SKIP). No preamble, no quotes, no markdown.
+
+<learning>
+{{ INPUTS }}
+</learning>