auditreach-cli 0.1.0

package/dist/auth/credential-store.js

@@ -0,0 +1,50 @@
+import { Entry } from "@napi-rs/keyring";
+const SERVICE_NAME = "auditreach";
+function accountName(platform, key) {
+    return `${platform}:${key}`;
+}
+/**
+ * All credential I/O goes through this module. It is the one place allowed
+ * to touch a raw secret -- callers get it back only to hand directly to an
+ * API client's auth constructor, never to log, print, or serialize it.
+ */
+export function setCredential(platform, key, value) {
+    const entry = new Entry(SERVICE_NAME, accountName(platform, key));
+    entry.setPassword(value);
+}
+export function getCredential(platform, key) {
+    const entry = new Entry(SERVICE_NAME, accountName(platform, key));
+    try {
+        return entry.getPassword();
+    }
+    catch {
+        return null;
+    }
+}
+export function deleteCredential(platform, key) {
+    const entry = new Entry(SERVICE_NAME, accountName(platform, key));
+    try {
+        return entry.deletePassword();
+    }
+    catch {
+        return false;
+    }
+}
+export function getRedditCredentials() {
+    const clientId = getCredential("reddit", "clientId");
+    const clientSecret = getCredential("reddit", "clientSecret");
+    const username = getCredential("reddit", "username");
+    const password = getCredential("reddit", "password");
+    if (!clientId || !clientSecret || !username || !password) {
+        return null;
+    }
+    return { clientId, clientSecret, username, password };
+}
+export function getYoutubeCredentials() {
+    const apiKey = getCredential("youtube", "apiKey");
+    if (!apiKey) {
+        return null;
+    }
+    return { apiKey };
+}
+//# sourceMappingURL=credential-store.js.map

package/dist/auth/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../src/auth/credential-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,MAAM,YAAY,GAAG,YAAY,CAAC;AAMlC,SAAS,WAAW,CAAC,QAAkB,EAAE,GAAkB;IACzD,OAAO,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,GAAkB,EAAE,KAAa;IACjF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,GAAkB;IAClE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkB,EAAE,GAAkB;IACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { runSearchCommand } from "./commands/search.js";
+import { runAuthCommand } from "./commands/auth.js";
+import { runVerifyLogCommand } from "./commands/verify-log.js";
+import { DEFAULT_LIMIT as REDDIT_DEFAULT_LIMIT, MAX_LIMIT as REDDIT_MAX_LIMIT, } from "./clients/reddit-client.js";
+import { MAX_MAX_RESULTS as YOUTUBE_MAX_MAX_RESULTS } from "./clients/youtube-client.js";
+const VERSION = "0.1.0";
+function assertPlatform(value) {
+    if (value !== "reddit" && value !== "youtube") {
+        console.error(`Unsupported platform "${value}". Supported in v0.1: reddit, youtube.`);
+        console.error("X (Twitter) support is deferred to v0.2 -- see README for why.");
+        process.exit(1);
+    }
+}
+const program = new Command();
+program
+    .name("auditreach")
+    .description("Official-API-only, BYOK research CLI with a hash-chained compliance audit log")
+    .version(VERSION);
+program
+    .command("search")
+    .description("Search a platform using its official API only")
+    .requiredOption("--platform <platform>", "reddit | youtube")
+    .option("--query <query>", "search query")
+    .option("--subreddit <subreddit>", "restrict search to one subreddit (reddit only)")
+    .option("--channel <handle>", "restrict search to one channel, e.g. @AnthropicAI (youtube only)")
+    .option("--since <date>", "only results published after this date, e.g. 2026-06-01 (youtube only)")
+    .option("--max-results <n>", `maximum results to return (default: ${REDDIT_DEFAULT_LIMIT}; platform caps: ${REDDIT_MAX_LIMIT} Reddit / ${YOUTUBE_MAX_MAX_RESULTS} YouTube)`, (v) => {
+    const parsed = parseInt(v, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new Error(`--max-results must be a positive integer, got "${v}"`);
+    }
+    return parsed;
+})
+    .option("--before <fullname>", "page results before this Reddit fullname cursor, e.g. t3_abc123 (reddit only)")
+    .option("--after <fullname>", "page results after this Reddit fullname cursor, e.g. t3_abc123 (reddit only)")
+    .option("--output <path>", "write full results JSON to this path")
+    .action(async (opts) => {
+    assertPlatform(opts.platform);
+    await runSearchCommand({
+        platform: opts.platform,
+        query: opts.query,
+        subreddit: opts.subreddit,
+        channel: opts.channel,
+        since: opts.since,
+        maxResults: opts.maxResults,
+        before: opts.before,
+        after: opts.after,
+        output: opts.output,
+    });
+});
+program
+    .command("auth")
+    .description("Set up or clear BYOK credentials for a platform (stored in your OS keychain)")
+    .requiredOption("--platform <platform>", "reddit | youtube")
+    .option("--clear", "delete stored credentials for this platform")
+    .option("--verify", "verify stored credentials are valid without running a search (no results file, no audit-log entry)")
+    .action(async (opts) => {
+    assertPlatform(opts.platform);
+    await runAuthCommand({ platform: opts.platform, clear: opts.clear, verify: opts.verify });
+});
+program
+    .command("verify-log")
+    .description("Verify the local hash-chained audit log has not been tampered with")
+    .option("--path <path>", "path to the audit log file")
+    .action(async (opts) => {
+    await runVerifyLogCommand({ path: opts.path });
+});
+program.parseAsync(process.argv).catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EACL,aAAa,IAAI,oBAAoB,EACrC,SAAS,IAAI,gBAAgB,GAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,IAAI,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEzF,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,yBAAyB,KAAK,wCAAwC,CAAC,CAAC;QACtF,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,+EAA+E,CAAC;KAC5F,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,cAAc,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;KAC3D,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC;KACzC,MAAM,CAAC,yBAAyB,EAAE,gDAAgD,CAAC;KACnF,MAAM,CAAC,oBAAoB,EAAE,kEAAkE,CAAC;KAChG,MAAM,CACL,gBAAgB,EAChB,wEAAwE,CACzE;KACA,MAAM,CACL,mBAAmB,EACnB,uCAAuC,oBAAoB,oBAAoB,gBAAgB,aAAa,uBAAuB,WAAW,EAC9I,CAAC,CAAC,EAAE,EAAE;IACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CACF;KACA,MAAM,CACL,qBAAqB,EACrB,+EAA+E,CAChF;KACA,MAAM,CACL,oBAAoB,EACpB,8EAA8E,CAC/E;KACA,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;KACjE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,gBAAgB,CAAC;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8EAA8E,CAAC;KAC3F,cAAc,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;KAC3D,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;KAChE,MAAM,CACL,UAAU,EACV,oGAAoG,CACrG;KACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,oEAAoE,CAAC;KACjF,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;KACrD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACxD,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/clients/reddit-client.d.ts

@@ -0,0 +1,33 @@
+import type { RedditCredentials } from "../auth/credential-store.js";
+import type { RedditSearchOptions, SearchOutcome } from "../types.js";
+export declare const DEFAULT_LIMIT = 25;
+export declare const MAX_LIMIT = 100;
+/**
+ * Talks to Reddit's official OAuth API only -- no cookie import, no session
+ * reuse. Uses the password grant (Reddit's "script app" flow), the
+ * documented mechanism for a single-user, read-only research tool.
+ */
+export declare class RedditClient {
+    private readonly credentials;
+    private accessToken;
+    private tokenExpiresAt;
+    constructor(credentials: RedditCredentials);
+    private getAccessToken;
+    /**
+     * Builds a cause-specific suffix for a failed search request, mirroring
+     * the guidance style used for token-request failures above. Returns an
+     * empty string when no known cause can be diagnosed, so callers can
+     * always append the result directly onto the generic error message.
+     */
+    private diagnoseSearchFailure;
+    /**
+     * Performs the same OAuth token request used before every search, but
+     * without issuing a search call. Used by `auditreach auth --verify` to
+     * check credentials without requiring --query and without touching the
+     * results file or audit log. Always forces a fresh token request rather
+     * than reusing a cached one, so it reflects the current credential state.
+     */
+    verifyCredentials(): Promise<void>;
+    search(options: RedditSearchOptions): Promise<SearchOutcome>;
+}
+//# sourceMappingURL=reddit-client.d.ts.map

package/dist/clients/reddit-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reddit-client.d.ts","sourceRoot":"","sources":["../../src/clients/reddit-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAC;AAQxF,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,SAAS,MAAM,CAAC;AA0C7B;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAK;gBAEf,WAAW,EAAE,iBAAiB;YAI5B,cAAc;IAoC5B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;OAMG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;CAiFnE"}

package/dist/clients/reddit-client.js

@@ -0,0 +1,153 @@
+const USER_AGENT = "auditreach-cli/0.1.0 (official-API-only compliance research tool)";
+// Applied silently when --max-results is omitted, and used as the hard
+// ceiling even when --max-results is passed a larger value. Documented in
+// --help (src/cli.ts) and README.md so a caller cannot be silently truncated
+// without knowing more results exist -- see the truncation warning emitted
+// by src/commands/search.ts.
+export const DEFAULT_LIMIT = 25;
+export const MAX_LIMIT = 100;
+const TOKEN_URL = "https://www.reddit.com/api/v1/access_token";
+const API_BASE = "https://oauth.reddit.com";
+// Matches a subreddit value that still carries a leading "r/" or "/r/"
+// prefix, e.g. "r/MachineLearning" or "/r/MachineLearning" instead of the
+// bare "MachineLearning" the Reddit search API expects. This is the most
+// common cause of an otherwise-undiagnosed 400 on the search endpoint (see
+// https://github.com/praw-dev/praw/issues/1939).
+const LEADING_SUBREDDIT_PREFIX = /^\/?r\//i;
+/**
+ * Talks to Reddit's official OAuth API only -- no cookie import, no session
+ * reuse. Uses the password grant (Reddit's "script app" flow), the
+ * documented mechanism for a single-user, read-only research tool.
+ */
+export class RedditClient {
+    credentials;
+    accessToken = null;
+    tokenExpiresAt = 0;
+    constructor(credentials) {
+        this.credentials = credentials;
+    }
+    async getAccessToken() {
+        if (this.accessToken && Date.now() < this.tokenExpiresAt) {
+            return this.accessToken;
+        }
+        const basicAuth = Buffer.from(`${this.credentials.clientId}:${this.credentials.clientSecret}`).toString("base64");
+        const response = await fetch(TOKEN_URL, {
+            method: "POST",
+            headers: {
+                Authorization: `Basic ${basicAuth}`,
+                "User-Agent": USER_AGENT,
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams({
+                grant_type: "password",
+                username: this.credentials.username,
+                password: this.credentials.password,
+            }),
+        });
+        if (!response.ok) {
+            throw new Error(`Reddit OAuth token request failed: ${response.status} ${response.statusText}. Check your credentials with "auditreach auth --platform reddit".`);
+        }
+        const token = (await response.json());
+        this.accessToken = token.access_token;
+        // Refresh 60s before actual expiry to avoid a request failing mid-flight.
+        this.tokenExpiresAt = Date.now() + (token.expires_in - 60) * 1000;
+        return this.accessToken;
+    }
+    /**
+     * Builds a cause-specific suffix for a failed search request, mirroring
+     * the guidance style used for token-request failures above. Returns an
+     * empty string when no known cause can be diagnosed, so callers can
+     * always append the result directly onto the generic error message.
+     */
+    diagnoseSearchFailure(status, subreddit) {
+        if (status === 400 && subreddit && LEADING_SUBREDDIT_PREFIX.test(subreddit)) {
+            const cleaned = subreddit.replace(LEADING_SUBREDDIT_PREFIX, "");
+            return ` Your --subreddit value "${subreddit}" has a leading "r/" or "/r/" prefix -- Reddit's API expects just the subreddit name (try "${cleaned}" instead).`;
+        }
+        return "";
+    }
+    /**
+     * Performs the same OAuth token request used before every search, but
+     * without issuing a search call. Used by `auditreach auth --verify` to
+     * check credentials without requiring --query and without touching the
+     * results file or audit log. Always forces a fresh token request rather
+     * than reusing a cached one, so it reflects the current credential state.
+     */
+    async verifyCredentials() {
+        this.accessToken = null;
+        this.tokenExpiresAt = 0;
+        await this.getAccessToken();
+    }
+    async search(options) {
+        const limit = Math.min(options.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+        const accessToken = await this.getAccessToken();
+        const params = new URLSearchParams({
+            q: options.query,
+            sort: "relevance",
+            limit: String(limit),
+        });
+        if (options.subreddit) {
+            params.set("restrict_sr", "1");
+        }
+        // Reddit's search listing endpoint accepts standard Listing pagination
+        // cursors (before/after, Reddit "fullname" ids e.g. "t3_abc123"). These
+        // let a caller page past the ~1000-result search cap by walking the
+        // listing forward/backward from a known item instead of relying on
+        // offset-based paging, which Reddit's search API does not support.
+        if (options.before) {
+            params.set("before", options.before);
+        }
+        if (options.after) {
+            params.set("after", options.after);
+        }
+        const path = options.subreddit
+            ? `/r/${encodeURIComponent(options.subreddit)}/search`
+            : "/search";
+        const response = await fetch(`${API_BASE}${path}?${params.toString()}`, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                "User-Agent": USER_AGENT,
+            },
+        });
+        if (!response.ok) {
+            throw new Error(`Reddit search request failed: ${response.status} ${response.statusText}.${this.diagnoseSearchFailure(response.status, options.subreddit)}`);
+        }
+        const listing = (await response.json());
+        const items = listing.data.children.map(({ data }) => ({
+            id: data.id,
+            title: data.title,
+            url: `https://reddit.com${data.permalink}`,
+            createdAt: new Date(data.created_utc * 1000).toISOString(),
+            author: data.author,
+            score: data.score,
+            extra: {
+                subreddit: data.subreddit_name_prefixed,
+                num_comments: data.num_comments,
+            },
+        }));
+        return {
+            platform: "reddit",
+            endpoint: options.subreddit ? `GET /r/${options.subreddit}/search` : "GET /search",
+            queryParams: {
+                query: options.query,
+                subreddit: options.subreddit,
+                limit,
+                before: options.before,
+                after: options.after,
+            },
+            authScope: "OAuth script-app grant, read-only, public-subreddit scope",
+            consentBasis: "Reddit API Terms -- public content, official API, read-only script-app credentials",
+            items,
+            // Cursors read back from Reddit's own response (not an echo of the
+            // request params above) -- feed `nextCursor.after` into the next
+            // call's `--after`/`options.after` to walk forward through results
+            // past the ~1000-result search cap, and `nextCursor.before` to walk
+            // backward. This is the piece praw#614 was actually stuck on.
+            nextCursor: {
+                after: listing.data.after ?? null,
+                before: listing.data.before ?? null,
+            },
+        };
+    }
+}
+//# sourceMappingURL=reddit-client.js.map

package/dist/clients/reddit-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reddit-client.js","sourceRoot":"","sources":["../../src/clients/reddit-client.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,GAAG,mEAAmE,CAAC;AACvF,uEAAuE;AACvE,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,MAAM,SAAS,GAAG,4CAA4C,CAAC;AAC/D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,iDAAiD;AACjD,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAiC5C;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACN,WAAW,CAAoB;IACxC,WAAW,GAAkB,IAAI,CAAC;IAClC,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAY,WAA8B;QACxC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAChE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,SAAS,EAAE;gBACnC,YAAY,EAAE,UAAU;gBACxB,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,UAAU;gBACtB,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;gBACnC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;aACpC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,oEAAoE,CACjJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACtC,0EAA0E;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;QAClE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,MAAc,EAAE,SAAkB;QAC9D,IAAI,MAAM,KAAK,GAAG,IAAI,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO,4BAA4B,SAAS,8FAA8F,OAAO,aAAa,CAAC;QACjK,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA4B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,CAAC,EAAE,OAAO,CAAC,KAAK;YAChB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,mEAAmE;QACnE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS;YAC5B,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS;YACtD,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;YACtE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,YAAY,EAAE,UAAU;aACzB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAC5I,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAEjE,MAAM,KAAK,GAAuB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACzE,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,qBAAqB,IAAI,CAAC,SAAS,EAAE;YAC1C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC1D,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,uBAAuB;gBACvC,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC;SACF,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,aAAa;YAClF,WAAW,EAAE;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,SAAS,EAAE,2DAA2D;YACtE,YAAY,EACV,oFAAoF;YACtF,KAAK;YACL,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,oEAAoE;YACpE,8DAA8D;YAC9D,UAAU,EAAE;gBACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;gBACjC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;aACpC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/clients/youtube-client.d.ts

@@ -0,0 +1,16 @@
+import type { YoutubeCredentials } from "../auth/credential-store.js";
+import type { SearchOutcome, YoutubeSearchOptions } from "../types.js";
+export declare const DEFAULT_MAX_RESULTS = 25;
+export declare const MAX_MAX_RESULTS = 50;
+export declare class YoutubeClient {
+    private readonly youtube;
+    constructor(credentials: YoutubeCredentials);
+    /**
+     * Issues a minimal authenticated request (1 quota unit, no query needed)
+     * to confirm the API key is valid. Used by `auditreach auth --verify`
+     * instead of running a real search.
+     */
+    verifyCredentials(): Promise<void>;
+    search(options: YoutubeSearchOptions): Promise<SearchOutcome>;
+}
+//# sourceMappingURL=youtube-client.d.ts.map

package/dist/clients/youtube-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"youtube-client.d.ts","sourceRoot":"","sources":["../../src/clients/youtube-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAoB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAOzF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAEhD,WAAW,EAAE,kBAAkB;IAI3C;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;CA2DpE"}

package/dist/clients/youtube-client.js

@@ -0,0 +1,77 @@
+import { google } from "googleapis";
+// Applied silently when --max-results is omitted, and used as the hard
+// ceiling even when --max-results is passed a larger value. Documented in
+// --help (src/cli.ts) and README.md so a caller cannot be silently truncated
+// without knowing more results exist -- see the truncation warning emitted
+// by src/commands/search.ts.
+export const DEFAULT_MAX_RESULTS = 25;
+export const MAX_MAX_RESULTS = 50;
+export class YoutubeClient {
+    youtube;
+    constructor(credentials) {
+        this.youtube = google.youtube({ version: "v3", auth: credentials.apiKey });
+    }
+    /**
+     * Issues a minimal authenticated request (1 quota unit, no query needed)
+     * to confirm the API key is valid. Used by `auditreach auth --verify`
+     * instead of running a real search.
+     */
+    async verifyCredentials() {
+        await this.youtube.videoCategories.list({ part: ["snippet"], regionCode: "US" });
+    }
+    async search(options) {
+        if (!options.query && !options.channelHandle) {
+            throw new Error("YouTube search requires either --query or --channel");
+        }
+        const maxResults = Math.min(options.maxResults ?? DEFAULT_MAX_RESULTS, MAX_MAX_RESULTS);
+        let channelId;
+        if (options.channelHandle) {
+            const handle = options.channelHandle.startsWith("@")
+                ? options.channelHandle
+                : `@${options.channelHandle}`;
+            const channelResponse = await this.youtube.channels.list({
+                part: ["id"],
+                forHandle: handle,
+            });
+            channelId = channelResponse.data.items?.[0]?.id ?? undefined;
+            if (!channelId) {
+                throw new Error(`No YouTube channel found for handle "${handle}"`);
+            }
+        }
+        const response = await this.youtube.search.list({
+            part: ["snippet"],
+            q: options.query,
+            channelId,
+            publishedAfter: options.since ? new Date(options.since).toISOString() : undefined,
+            maxResults,
+            type: ["video"],
+            order: "date",
+        });
+        const items = (response.data.items ?? []).map((item) => ({
+            id: item.id?.videoId ?? "",
+            title: item.snippet?.title ?? "",
+            url: `https://www.youtube.com/watch?v=${item.id?.videoId ?? ""}`,
+            createdAt: item.snippet?.publishedAt ?? "",
+            author: item.snippet?.channelTitle ?? null,
+            score: null,
+            extra: {
+                channelId: item.snippet?.channelId,
+                description: item.snippet?.description,
+            },
+        }));
+        return {
+            platform: "youtube",
+            endpoint: "GET /youtube/v3/search",
+            queryParams: {
+                query: options.query,
+                channel: options.channelHandle,
+                since: options.since,
+                maxResults,
+            },
+            authScope: "YouTube Data API v3, API-key auth, public search scope",
+            consentBasis: "YouTube API Services Terms -- public content, official API, API-key auth",
+            items,
+        };
+    }
+}
+//# sourceMappingURL=youtube-client.js.map

package/dist/clients/youtube-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"youtube-client.js","sourceRoot":"","sources":["../../src/clients/youtube-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIpC,uEAAuE;AACvE,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,MAAM,OAAO,aAAa;IACP,OAAO,CAAoC;IAE5D,YAAY,WAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA6B;QACxC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,EAAE,eAAe,CAAC,CAAC;QAExF,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;gBAClD,CAAC,CAAC,OAAO,CAAC,aAAa;gBACvB,CAAC,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACvD,IAAI,EAAE,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,SAAS,CAAC;YAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,GAAG,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9C,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,CAAC,EAAE,OAAO,CAAC,KAAK;YAChB,SAAS;YACT,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YACjF,UAAU;YACV,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,MAAM,KAAK,GAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3E,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE;YAC1B,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAChC,GAAG,EAAE,mCAAmC,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,EAAE;YAChE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE;YAC1C,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YAC1C,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;gBAClC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW;aACvC;SACF,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,wBAAwB;YAClC,WAAW,EAAE;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,aAAa;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU;aACX;YACD,SAAS,EAAE,wDAAwD;YACnE,YAAY,EAAE,0EAA0E;YACxF,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,8 @@
+import type { Platform } from "../types.js";
+export interface AuthCommandArgs {
+    platform: Platform;
+    clear?: boolean;
+    verify?: boolean;
+}
+export declare function runAuthCommand(args: AuthCommandArgs): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCzE"}

package/dist/commands/auth.js

@@ -0,0 +1,90 @@
+import { setCredential, deleteCredential, getRedditCredentials, getYoutubeCredentials, } from "../auth/credential-store.js";
+import { promptText, promptSecret } from "../util/prompt.js";
+import { RedditClient } from "../clients/reddit-client.js";
+import { YoutubeClient } from "../clients/youtube-client.js";
+export async function runAuthCommand(args) {
+    if (args.clear) {
+        await clearCredentials(args.platform);
+        return;
+    }
+    if (args.verify) {
+        await verifyCredentials(args.platform);
+        return;
+    }
+    if (args.platform === "reddit") {
+        console.log("Setting up Reddit API credentials (OAuth script app).");
+        console.log('Create one at https://www.reddit.com/prefs/apps -- choose app type "script".\n');
+        const clientId = await promptText("Client ID: ");
+        const clientSecret = await promptSecret("Client secret: ");
+        const username = await promptText("Reddit username: ");
+        const password = await promptSecret("Reddit password: ");
+        setCredential("reddit", "clientId", clientId);
+        setCredential("reddit", "clientSecret", clientSecret);
+        setCredential("reddit", "username", username);
+        setCredential("reddit", "password", password);
+        console.log("\nReddit credentials stored in your OS keychain.");
+        console.log("Rate limits: Reddit's official API is generally workable for most research volumes.");
+    }
+    else {
+        console.log("Setting up YouTube Data API v3 credentials.");
+        console.log("Create an API key at https://console.cloud.google.com/apis/credentials\n");
+        const apiKey = await promptSecret("API key: ");
+        setCredential("youtube", "apiKey", apiKey);
+        console.log("\nYouTube credentials stored in your OS keychain.");
+        console.log("Rate limits: quota-based (10,000 units/day default), generally workable.");
+    }
+}
+async function clearCredentials(platform) {
+    if (platform === "reddit") {
+        deleteCredential("reddit", "clientId");
+        deleteCredential("reddit", "clientSecret");
+        deleteCredential("reddit", "username");
+        deleteCredential("reddit", "password");
+    }
+    else {
+        deleteCredential("youtube", "apiKey");
+    }
+    console.log(`Cleared stored credentials for ${platform}.`);
+}
+/**
+ * Standalone credential check for `auditreach auth --verify`. Reuses each
+ * client's token-fetch/auth-check logic (never duplicates it) and performs
+ * a single minimal authenticated request. Unlike `search`, this never
+ * requires --query, never writes a results file, and never appends an
+ * audit-log entry -- it only reports whether the stored credentials work.
+ */
+async function verifyCredentials(platform) {
+    if (platform === "reddit") {
+        const credentials = getRedditCredentials();
+        if (!credentials) {
+            console.error('No Reddit credentials found. Run "auditreach auth --platform reddit" first.');
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            await new RedditClient(credentials).verifyCredentials();
+            console.log("Reddit credentials are valid.");
+        }
+        catch (error) {
+            console.error(`Reddit credential check failed: ${error instanceof Error ? error.message : String(error)}`);
+            process.exitCode = 1;
+        }
+    }
+    else {
+        const credentials = getYoutubeCredentials();
+        if (!credentials) {
+            console.error('No YouTube credentials found. Run "auditreach auth --platform youtube" first.');
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            await new YoutubeClient(credentials).verifyCredentials();
+            console.log("YouTube credentials are valid.");
+        }
+        catch (error) {
+            console.error(`YouTube credential check failed: ${error instanceof Error ? error.message : String(error)}`);
+            process.exitCode = 1;
+        }
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAS7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAEzD,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9C,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QACtD,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CACT,qFAAqF,CACtF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAC/C,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE3C,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvC,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC3C,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;YAC7F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,+EAA+E,CAChF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/search.d.ts

@@ -0,0 +1,14 @@
+import type { Platform } from "../types.js";
+export interface SearchCommandArgs {
+    platform: Platform;
+    query?: string;
+    subreddit?: string;
+    channel?: string;
+    since?: string;
+    maxResults?: number;
+    before?: string;
+    after?: string;
+    output?: string;
+}
+export declare function runSearchCommand(args: SearchCommandArgs): Promise<void>;
+//# sourceMappingURL=search.d.ts.map

package/dist/commands/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAiB,MAAM,aAAa,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmE7E"}