@thesethrose/socialspool-cli 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -36,11 +36,26 @@ Requires Node.js 20.19 or newer.
36
36
 
37
37
  ## Authentication
38
38
 
39
- Create a SocialSpool API key in the dashboard, then set it in your shell or
40
- agent runtime:
39
+ Create a SocialSpool API key in the dashboard, then store it in your agent's
40
+ secure configuration: a profile `.env` file, config store, or secret manager.
41
+ Never write it to chat, logs, source control, or shell history.
42
+
43
+ Load it inline per invocation so it never lingers in the shell environment.
44
+
45
+ macOS / Linux:
41
46
 
42
47
  ```bash
43
- export SOCIALSPOOL_API_KEY=ssp_live_...
48
+ # From a profile .env file
49
+ export $(grep -v '^#' ~/.hermes/profiles/<name>/.env | grep SOCIALSPOOL_API_KEY | xargs) && spool me --json
50
+
51
+ # Or inline for a single command
52
+ SOCIALSPOOL_API_KEY="ssp_live_..." spool me --json
53
+ ```
54
+
55
+ Windows PowerShell:
56
+
57
+ ```powershell
58
+ $env:SOCIALSPOOL_API_KEY="ssp_live_..."; spool me --json
44
59
  ```
45
60
 
46
61
  For scheduling agents, use these scopes:
@@ -68,8 +83,7 @@ export SOCIALSPOOL_API_BASE_URL=https://socialspool.com/api/v1
68
83
 
69
84
  or pass `--base-url`.
70
85
 
71
- Never paste API keys into prompts, logs, tickets, or generated files. Configure
72
- them through the runtime environment.
86
+ Never paste API keys into prompts, logs, tickets, or generated files.
73
87
 
74
88
  ## Verify Setup
75
89
 
package/SKILL.md CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  name: socialspool-public-api-agent
3
3
  description: Use SocialSpool to inspect a workspace, list connected publishing accounts, create drafts, schedule posts, publish immediately, cancel scheduled posts, and verify post status through the public API and spool CLI.
4
- version: 2.0.0
4
+ version: 2.0.1
5
5
  author: SocialSpool
6
6
  metadata:
7
7
  hermes:
@@ -33,10 +33,27 @@ Use this skill when a user asks an agent to create, schedule, publish, cancel, o
33
33
 
34
34
  ## Authentication
35
35
 
36
- - Use `SOCIALSPOOL_API_KEY`.
36
+ - Store the API key in your agent's secure configuration: a profile `.env` file, config store, or secret manager. Never write it to chat, logs, source control, or shell history.
37
+ - Load it inline per invocation so it never lingers in the shell environment.
38
+
39
+ macOS / Linux (bash/zsh):
40
+
41
+ ```bash
42
+ # From a profile .env file
43
+ export $(grep -v '^#' ~/.hermes/profiles/<name>/.env | grep SOCIALSPOOL_API_KEY | xargs) && spool me --json
44
+
45
+ # Or inline for a single command
46
+ SOCIALSPOOL_API_KEY="ssp_live_..." spool me --json
47
+ ```
48
+
49
+ Windows (PowerShell):
50
+
51
+ ```powershell
52
+ $env:SOCIALSPOOL_API_KEY="ssp_live_..."; spool me --json
53
+ ```
54
+
37
55
  - Optional override: `SOCIALSPOOL_API_BASE_URL` or `--base-url`.
38
- - Never print, log, summarize, or echo the API key.
39
- - If authentication fails, report the structured API error code and request id if present.
56
+ - If authentication fails, report the structured API error code and request ID if present.
40
57
 
41
58
  ## Required first checks
42
59
 
package/dist/spool.js CHANGED
@@ -773,7 +773,7 @@ function formatHuman(data) {
773
773
  }
774
774
 
775
775
  // src/cli/spool/socialspool.ts
776
- var VERSION = "1.0.0";
776
+ var VERSION = "1.0.1";
777
777
  async function runSpoolCli(args, env = process.env, fetchImpl = fetch) {
778
778
  const parsed = parseArgs(args);
779
779
  if (parsed.options.help)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@thesethrose/socialspool-cli",
3
- "version": "1.0.0",
3
+ "version": "1.0.1",
4
4
  "description": "Agent-friendly CLI for the SocialSpool Public API.",
5
5
  "type": "module",
6
6
  "bin": {