dunsocial 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) DunSocial / THISUX
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,157 @@
+# DunSocial CLI (`dun`)
+
+Agent-first command line client for [DunSocial](https://dunsocial.com).
+
+Wraps the existing Mobile API (`apps/api`) — **no duplicate publish logic**.  
+Remote AI hosts (ChatGPT / Claude web) should keep using **MCP**. This CLI is for local agents (Claude Code, Codex), CI, and power users.
+
+Linear: [DUN-262](https://linear.app/thisuxco/issue/DUN-262) · [DUN-263](https://linear.app/thisuxco/issue/DUN-263) · [DUN-264](https://linear.app/thisuxco/issue/DUN-264)
+
+## Install
+
+### Monorepo (dev)
+
+```bash
+bun install
+bun run dev:cli -- --help
+bun apps/cli/src/index.ts auth status --json
+```
+
+### Built package (Node 20+)
+
+```bash
+bun run --cwd apps/cli build
+node apps/cli/dist/index.js --help
+
+# npm (when published)
+npm i -g dunsocial
+dun --help
+```
+
+Bins: `dun` · `dunsocial`. Package name: `dunsocial`.
+
+## Quick start
+
+```bash
+# 1. Authenticate with a Better Auth bearer session token
+export DUN_TOKEN=...          # or: dun auth login --token ...
+export DUN_API_URL=https://api.dunsocial.com   # optional
+
+# 2. Pick a workspace
+dun workspace list --json
+dun workspace use <id-or-slug>
+
+# 3. Discover connected accounts
+dun accounts list --json
+
+# 4. Schedule
+dun posts schedule \
+  --text "Hello from the DunSocial CLI" \
+  --accounts <socialAccountId> \
+  --in 1h \
+  --json
+```
+
+## Auth
+
+### Device login (default)
+
+```bash
+dun auth login
+# opens app.dunsocial.com/cli/authorize — approve, CLI stores token
+dun auth login --no-browser   # print URL only
+```
+
+### PAT / CI (recommended for automation)
+
+Create a token in **Settings → CLI** (hashed at rest, scoped, revocable):
+
+```bash
+export DUN_TOKEN='dun_pat_…'
+export DUN_WORKSPACE_ID='…'
+dun auth status --json
+```
+
+### Session token (humans / legacy)
+
+```bash
+dun auth login --token <bearer-session>
+export DUN_TOKEN=...
+dun auth whoami --json
+dun auth logout
+```
+
+Config: `~/.config/dunsocial/config.json` (0600). Override path with `DUN_CONFIG`.
+
+Env (wins over config):
+
+| Var | Purpose |
+|-----|---------|
+| `DUN_TOKEN` | Bearer token |
+| `DUN_WORKSPACE_ID` | Default workspace |
+| `DUN_API_URL` | API base URL |
+| `DUN_JSON=1` | Force JSON output |
+| `DUN_DEBUG=1` | Log HTTP to stderr |
+
+PATs with scoped UI management are a later follow-up. See `docs/cli.md` for a GitHub Actions announce example.
+
+## Commands
+
+See `dun --help` for the full map. Highlights:
+
+| Area | Examples |
+|------|----------|
+| Workspaces | `workspace list\|use\|current` |
+| Accounts | `accounts list [--platform x]` |
+| Posts | `schedule`, `publish`, `list`, `get`, `reschedule`, `cancel`, `delete`, `x-cap`, `schedule-thread`, `publish-thread` |
+| Drafts | `create`, `list`, `get`, `update`, `delete` |
+| Media | `upload <file>`, `list`, `get`, `delete` |
+| Memory | `collections list\|create`, `save`, `list`, `search`, `delete` |
+| Skills | `skill install claude\|codex` |
+
+### Global flags
+
+```
+--json  --workspace <id>  --api-url <url>  --token <token>
+--debug  --quiet  --yes  --help  --version
+```
+
+JSON is the default when stdout is not a TTY or `CI=1`.
+
+### Exit codes
+
+0 ok · 1 usage · 2 auth · 3 forbidden · 4 validation · 5 not found · 6 rate limited · 7 network
+
+## Agent skills
+
+```bash
+dun skill install claude   # ~/.claude/skills/dunsocial/SKILL.md
+dun skill install codex    # ~/.codex/skills/... + AGENTS.md block
+```
+
+## Development
+
+```bash
+bun run --cwd apps/cli test
+bun run --cwd apps/cli type-check
+bun run --cwd apps/cli build
+bun run --cwd apps/cli release-check
+```
+
+## Releases (npm)
+
+Do **not** bump `version` by hand for normal releases.
+
+1. Merge conventional commits affecting `apps/cli` to `main`
+2. Merge the **release-please** PR (version + `CHANGELOG.md`)
+3. CI publishes `dunsocial` to npm (`NPM_TOKEN` secret)
+
+See [docs/release.md](../../docs/release.md). Manual: Actions → **Release CLI** → run with an existing tag.
+
+## Architecture
+
+```
+dun → HTTPS + Bearer + X-Workspace-Id → apps/api REST
+```
+
+Do not import DB/MCP server code into the CLI. Keep it a thin client.

package/dist/index.js

@@ -0,0 +1,146 @@
+#!/usr/bin/env bun
+// @bun
+import{mkdir as dn,readFile as Ie,writeFile as rn,chmod as tn,unlink as mn}from"node:fs/promises";import{dirname as yn,join as ue}from"node:path";import{homedir as pe}from"node:os";var o={OK:0,USAGE:1,AUTH:2,FORBIDDEN:3,VALIDATION:4,NOT_FOUND:5,RATE_LIMITED:6,NETWORK:7};class w extends Error{code;details;constructor(e,n=o.USAGE,u){super(e);this.name="CliError",this.code=n,this.details=u}}function ne(e){if(e===401)return o.AUTH;if(e===403)return o.FORBIDDEN;if(e===404)return o.NOT_FOUND;if(e===429)return o.RATE_LIMITED;if(e>=400&&e<500)return o.VALIDATION;return o.NETWORK}var Ge="https://api.dunsocial.com",W="0.2.0";function Ve(){if(process.env.DUN_CONFIG)return process.env.DUN_CONFIG;let e=process.env.XDG_CONFIG_HOME,n=e?e:ue(pe(),".config");return ue(n,"dunsocial","config.json")}async function _e(){let e=Ve();try{let n=await Ie(e,"utf8");return JSON.parse(n)}catch(n){if(n.code==="ENOENT")return{};throw new w(`Failed to read config at ${e}: ${n.message}`,o.USAGE)}}async function de(e){let n=await _e(),u=(e.apiUrl||process.env.DUN_API_URL||n.apiUrl||Ge).replace(/\/$/,""),t=e.token||process.env.DUN_TOKEN||n.token,y=e.workspace||process.env.DUN_WORKSPACE_ID||n.defaultWorkspaceId||void 0,d=process.env.DUN_JSON==="0",i=!process.stdout.isTTY,r=d?!1:e.json===!0||process.env.DUN_JSON==="1"||process.env.CI==="true"||process.env.CI==="1"||i;return{apiUrl:u,token:t,workspaceId:y,json:r,debug:e.debug===!0||process.env.DUN_DEBUG==="1",quiet:e.quiet===!0,yes:e.yes===!0||process.env.CI==="true"||process.env.CI==="1",config:n}}function re(e){let n={},u=[],t=0,y=!0;while(t<e.length){let O=e[t];if(y&&O==="--"){y=!1,t+=1;continue}if(y&&O.startsWith("--")){let A=O.indexOf("=");if(A!==-1){n[O.slice(2,A)]=O.slice(A+1),t+=1;continue}let T=O.slice(2),U=e[t+1];if(U!==void 0&&!U.startsWith("-"))n[T]=U,t+=2;else n[T]=!0,t+=1;continue}if(y&&O.startsWith("-")&&O.length>1&&O!=="-"){let A=O.slice(1);if(A.length>1&&!A.includes("=")){for(let V of A)n[V]=!0;t+=1;continue}let T=A,U=e[t+1];if(U!==void 0&&!U.startsWith("-"))n[T]=U,t+=2;else n[T]=!0,t+=1;continue}u.push(O),t+=1}let d=u[0],i,r,m=1;if(d==="memory"&&(u[1]==="collections"||u[1]==="collection"))r="collections",i=u[2],m=i?3:2;else i=u[1],m=i?2:1;return{group:d,action:i,nest:r,flags:n,positionals:u.slice(m)}}function M(e,...n){for(let u of n){let t=e[u];if(typeof t==="string"&&t.length>0)return t}return}function K(e,...n){for(let u of n){let t=e[u];if(t===!0)return!0;if(typeof t==="string"){let y=t.toLowerCase();if(y==="1"||y==="true"||y==="yes")return!0}}return!1}function F(e){return K(e,"help","h")}function q(e){return K(e,"version","v","V")}function s(e,n){if(n.quiet&&!n.json)return;if(n.json||!process.stdout.isTTY){process.stdout.write(`${JSON.stringify({ok:!0,data:e},null,2)}
+`);return}if(e===void 0||e===null){process.stdout.write(`ok
+`);return}if(typeof e==="string"){process.stdout.write(`${e}
+`);return}process.stdout.write(`${Je(e)}
+`)}function ie(e,n){let{message:u,code:t,details:y}=Le(e);if(n.json||!process.stdout.isTTY)process.stdout.write(`${JSON.stringify({ok:!1,error:{code:Ke(t),message:u,details:y??null}},null,2)}
+`);else if(process.stderr.write(`error: ${u}
+`),y!==void 0&&process.env.DUN_DEBUG==="1")process.stderr.write(`${JSON.stringify(y,null,2)}
+`);return t}function Ke(e){switch(e){case o.AUTH:return"auth";case o.FORBIDDEN:return"forbidden";case o.VALIDATION:return"validation";case o.NOT_FOUND:return"not_found";case o.RATE_LIMITED:return"rate_limited";case o.NETWORK:return"network";default:return"usage"}}function Le(e){if(e instanceof w)return{message:e.message,code:e.code,details:e.details};if(e instanceof Error)return{message:e.message,code:o.USAGE};return{message:String(e),code:o.USAGE}}function Je(e){if(Array.isArray(e)){if(e.length===0)return"(empty)";if(e.every((n)=>n&&typeof n==="object"))return te(e);return e.map((n)=>`- ${P(n)}`).join(`
+`)}if(e&&typeof e==="object"){let n=e;if(Array.isArray(n.items)){let u=typeof n.total==="number"?`total=${n.total} showing=${n.items.length}`:void 0,t=te(n.items);return u?`${u}
+${t}`:t}return Object.entries(n).map(([u,t])=>`${u}: ${P(t)}`).join(`
+`)}return String(e)}function te(e){if(e.length===0)return"(empty)";let n=["id","name","slug","status","providerName","username","displayName","role","scheduledAt","content","text","originalFilename","score","collectionId"],u=new Set;for(let m of e)for(let O of Object.keys(m))u.add(O);let t=[...n.filter((m)=>u.has(m)),...[...u].filter((m)=>!n.includes(m)).slice(0,6)].slice(0,8),y=e.map((m)=>t.map((O)=>He(P(m[O]),O==="content"||O==="text"?48:28))),d=t.map((m,O)=>Math.max(m.length,...y.map((A)=>A[O]?.length??0))),i=t.map((m,O)=>m.padEnd(d[O])).join("  "),r=y.map((m)=>m.map((O,A)=>O.padEnd(d[A])).join("  ")).join(`
+`);return`${i}
+${r}`}function P(e){if(e===null||e===void 0)return"";if(typeof e==="string")return e.replace(/\s+/g," ").trim();if(typeof e==="number"||typeof e==="boolean")return String(e);if(e instanceof Date)return e.toISOString();if(typeof e==="object"){let n=e;if(typeof n.id==="string"&&typeof n.name==="string")return`${n.name} (${n.id})`;if(typeof n.status==="string")return n.status;return JSON.stringify(e)}return String(e)}function He(e,n){if(e.length<=n)return e;return`${e.slice(0,Math.max(0,n-1))}…`}var G={OK:0,USAGE:1,AUTH:2,FORBIDDEN:3,VALIDATION:4,NOT_FOUND:5,RATE_LIMITED:6,NETWORK:7};class S extends Error{code;details;constructor(e,n=G.USAGE,u){super(e);this.name="CliError",this.code=n,this.details=u}}import{mkdir as Ye,readFile as Rn,writeFile as ze,chmod as We,unlink as Me}from"node:fs/promises";import{dirname as Qe,join as me}from"node:path";import{homedir as Xe}from"node:os";var Q="0.2.0";function E(){if(process.env.DUN_CONFIG)return process.env.DUN_CONFIG;let e=process.env.XDG_CONFIG_HOME,n=e?e:me(Xe(),".config");return me(n,"dunsocial","config.json")}function L(){return E()}async function J(e){let n=E();await Ye(Qe(n),{recursive:!0});let u={...e,updatedAt:new Date().toISOString()};await ze(n,`${JSON.stringify(u,null,2)}
+`,"utf8");try{await We(n,384)}catch{}}async function oe(){let e=E();try{await Me(e)}catch(n){if(n.code!=="ENOENT")throw new w(`Failed to clear config: ${n.message}`,o.USAGE)}}function R(e){if(!e.token)throw new w("Not authenticated. Run `dun auth login --token <token>` or set DUN_TOKEN.",o.AUTH);return e.token}function k(e){if(!e.workspaceId)throw new w("No workspace selected. Run `dun workspace use <id|slug>` or pass --workspace / DUN_WORKSPACE_ID.",o.VALIDATION);return e.workspaceId}var X=`dun — DunSocial agent-first CLI v${Q}
+
+Usage:
+  dun <command> [flags]
+
+Auth:
+  dun auth login                 # device-code browser flow
+  dun auth login --token <token> # CI / headless
+  dun auth login --no-browser
+  dun auth logout
+  dun auth whoami
+  dun auth status
+
+Workspaces:
+  dun workspace list
+  dun workspace use <id|slug>
+  dun workspace current
+
+Accounts:
+  dun accounts list [--platform x]
+
+Posts:
+  dun posts list [--status scheduled|published|failed|draft|cancelled]
+  dun posts get <id>
+  dun posts schedule --text "..." --accounts <id,id> (--at ISO | --in 2h) [--media id,id]
+  dun posts publish --text "..." --accounts <id,id> [--media id,id] [--natural]
+  dun posts reschedule <id> --at ISO|--in 2h [--text "..."]
+  dun posts cancel <id>
+  dun posts delete <id> [--yes]
+  dun posts x-cap
+
+Drafts:
+  dun drafts list
+  dun drafts get <id>
+  dun drafts create --text "..." [--platforms x,linkedin] [--accounts id,id]
+  dun drafts update <id> --text "..."
+  dun drafts delete <id> [--yes]
+
+Media:
+  dun media list
+  dun media get <id>
+  dun media upload <file> [--alt "..."]
+  dun media delete <id> [--yes]
+
+Memory:
+  dun memory collections list
+  dun memory collections create --name "..." [--color blue] [--private]
+  dun memory list --collection <id>
+  dun memory save --collection <id> --text "..."
+  dun memory search --prompt "..." --collections <id,id> [--top-k 5]
+  dun memory delete <id> --collection <id> [--yes]
+
+Agent skills:
+  dun skill install claude
+  dun skill install codex
+  dun skill path
+
+Global flags:
+  --json              Machine-readable output (default when non-TTY / CI)
+  --workspace <id>    Override workspace for this command
+  --api-url <url>     Override API base (default https://api.dunsocial.com)
+  --token <token>     Override bearer token for this command
+  --debug             Log HTTP method/path/status to stderr
+  --quiet             Suppress human success output
+  --yes               Skip destructive confirmations
+  --help, -h          Show help
+  --version, -v       Show version
+
+Env:
+  DUN_TOKEN  DUN_WORKSPACE_ID  DUN_API_URL  DUN_CONFIG  DUN_JSON=1  DUN_DEBUG=1
+
+Exit codes:
+  0 ok · 1 usage · 2 auth · 3 forbidden · 4 validation · 5 not found · 6 rate limit · 7 network
+
+Docs: https://dunsocial.com · MCP remains the remote-host path; CLI is local/CI.
+`;function f(e){return{auth:`dun auth
+
+  login [--token]         Device-code browser login (default) or --token for CI
+  logout                  Clear local config
+  whoami                  Show current user profile
+  status                  Show auth + workspace summary
+`,workspace:`dun workspace
+
+  list                    List workspaces you belong to
+  use <id|slug>           Set default workspace
+  current                 Show default workspace
+`,workspaces:"Alias of workspace",accounts:"dun accounts list [--platform <name>]",posts:`dun posts
+
+  list [--status] [--account] [--limit] [--offset]
+  get <id>
+  schedule --text --accounts (--at|--in) [--media]
+  publish --text --accounts [--media] [--natural]
+  reschedule <id> (--at|--in) [--text]
+  cancel <id>
+  delete <id> [--yes]
+  x-cap
+`,drafts:"dun drafts list|get|create|update|delete",media:"dun media list|get|upload|delete",memory:`dun memory collections list|create
+dun memory list|save|search|delete`,skill:`dun skill install claude|codex
+dun skill path`}[e]??X}function N(e,n){if(n.quiet&&!n.json)return;if(n.json||!process.stdout.isTTY){process.stdout.write(`${JSON.stringify({ok:!0,data:e},null,2)}
+`);return}if(e===void 0||e===null){process.stdout.write(`ok
+`);return}if(typeof e==="string"){process.stdout.write(`${e}
+`);return}process.stdout.write(`${Ze(e)}
+`)}function Ze(e){if(Array.isArray(e)){if(e.length===0)return"(empty)";if(e.every((n)=>n&&typeof n==="object"))return ye(e);return e.map((n)=>`- ${v(n)}`).join(`
+`)}if(e&&typeof e==="object"){let n=e;if(Array.isArray(n.items)){let u=typeof n.total==="number"?`total=${n.total} showing=${n.items.length}`:void 0,t=ye(n.items);return u?`${u}
+${t}`:t}return Object.entries(n).map(([u,t])=>`${u}: ${v(t)}`).join(`
+`)}return String(e)}function ye(e){if(e.length===0)return"(empty)";let n=["id","name","slug","status","providerName","username","displayName","role","scheduledAt","content","text","originalFilename","score","collectionId"],u=new Set;for(let m of e)for(let O of Object.keys(m))u.add(O);let t=[...n.filter((m)=>u.has(m)),...[...u].filter((m)=>!n.includes(m)).slice(0,6)].slice(0,8),y=e.map((m)=>t.map((O)=>Be(v(m[O]),O==="content"||O==="text"?48:28))),d=t.map((m,O)=>Math.max(m.length,...y.map((A)=>A[O]?.length??0))),i=t.map((m,O)=>m.padEnd(d[O])).join("  "),r=y.map((m)=>m.map((O,A)=>O.padEnd(d[A])).join("  ")).join(`
+`);return`${i}
+${r}`}function v(e){if(e===null||e===void 0)return"";if(typeof e==="string")return e.replace(/\s+/g," ").trim();if(typeof e==="number"||typeof e==="boolean")return String(e);if(e instanceof Date)return e.toISOString();if(typeof e==="object"){let n=e;if(typeof n.id==="string"&&typeof n.name==="string")return`${n.name} (${n.id})`;if(typeof n.status==="string")return n.status;return JSON.stringify(e)}return String(e)}function Be(e,n){if(e.length<=n)return e;return`${e.slice(0,Math.max(0,n-1))}…`}function H(e,n,u){if(!e)return;if(u!==void 0){process.stderr.write(`[debug] ${n} ${JSON.stringify(u)}
+`);return}process.stderr.write(`[debug] ${n}
+`)}class we{ctx;constructor(e){this.ctx=e}async request(e){let n=e.method??"GET",u=new URL(e.path.startsWith("http")?e.path:`${this.ctx.apiUrl}${e.path}`);if(e.query)for(let[m,O]of Object.entries(e.query)){if(O===void 0||O===null||O==="")continue;u.searchParams.set(m,String(O))}let t={Accept:"application/json","User-Agent":`dunsocial-cli/${Q}`,...e.headers??{}};if(e.auth!==!1)t.Authorization=`Bearer ${R(this.ctx)}`;if(e.workspace)t["X-Workspace-Id"]=k(this.ctx);let y;if(e.body!==void 0)t["Content-Type"]="application/json",y=JSON.stringify(e.body);H(this.ctx.debug,`${n} ${u.toString()}`);let d;try{d=await fetch(u,{method:n,headers:t,body:y})}catch(m){throw new w(`Network error: ${m.message}`,o.NETWORK,{cause:String(m)})}let i=await d.text(),r=null;if(i)try{r=JSON.parse(i)}catch{r=null}if(H(this.ctx.debug,`← ${d.status}`,{ok:d.ok,bodyPreview:i.slice(0,300)}),!d.ok){let m=r?.error||r?.message||(i?i.slice(0,300):`HTTP ${d.status}`);throw new w(m,ne(d.status),{status:d.status,body:r??i})}if(r&&typeof r==="object"&&"success"in r){if(r.success===!1)throw new w(r.error||r.message||"Request failed",o.VALIDATION,r);return r.data}return r??void 0}get(e,n){return this.request({...n,method:"GET",path:e})}post(e,n,u){return this.request({...u,method:"POST",path:e,body:n})}patch(e,n,u){return this.request({...u,method:"PATCH",path:e,body:n})}delete(e,n,u){return this.request({...u,method:"DELETE",path:e,body:n})}}function D(e){return new we(e)}function $(e,...n){for(let u of n){let t=e[u];if(typeof t==="string"&&t.length>0)return t}return}function j(e,...n){for(let u of n){let t=e[u];if(t===!0)return!0;if(typeof t==="string"){let y=t.toLowerCase();if(y==="1"||y==="true"||y==="yes")return!0}}return!1}function I(e,...n){let u=$(e,...n);if(u===void 0)return;let t=Number(u);if(!Number.isFinite(t))throw Error(`Invalid number for --${n[0]}: ${u}`);return t}function p(e,...n){let u=$(e,...n);if(u===void 0)return;return u.split(",").map((t)=>t.trim()).filter(Boolean)}async function Oe(e,n,u,t){switch(n){case"login":return he(e,u);case"logout":return Pe(e);case"whoami":return se(e);case"status":return Se(e);default:throw new w(`Unknown auth command "${n??""}". Try: login, logout, whoami, status`,o.USAGE)}}async function he(e,n){let u=$(n,"token")||process.env.DUN_TOKEN;if(u)return Fe(e,u);return qe(e,n)}async function Fe(e,n){let u={...e,token:n},y=await D(u).get("/api/user/profile");await J({...e.config,apiUrl:e.apiUrl,token:n,defaultWorkspaceId:e.config.defaultWorkspaceId,defaultWorkspaceSlug:e.config.defaultWorkspaceSlug,defaultWorkspaceName:e.config.defaultWorkspaceName}),N({user:{id:y.id,name:y.name,email:y.email},configPath:L(),method:"token",message:"Logged in. Next: dun workspace list && dun workspace use <id|slug>"},e)}async function qe(e,n){let u=D({...e,token:void 0}),t=await u.post("/api/cli/auth/start",{clientName:"dun-cli"},{auth:!1}),y=!j(n,"no-browser");if(!e.json)process.stderr.write(`
+DunSocial CLI login
+`),process.stderr.write(`───────────────────
+`),process.stderr.write(`In your browser, open:
+  ${t.verificationUrlComplete}
+
+`),process.stderr.write(`Or go to ${t.verificationUrl} and enter code:
+`),process.stderr.write(`  ${t.userCode}
+
+`),process.stderr.write(`Waiting for approval…
+`);else process.stderr.write(JSON.stringify({ok:!0,phase:"waiting",userCode:t.userCode,verificationUrlComplete:t.verificationUrlComplete})+`
+`);if(y&&process.stdout.isTTY)try{await fe(t.verificationUrlComplete)}catch{}let d=Math.max(3,t.interval||5)*1000,i=Date.now()+(t.expiresIn||900)*1000;while(Date.now()<i){await Ee(d);let r=await u.post("/api/cli/auth/poll",{deviceCode:t.deviceCode},{auth:!1});if(r.status==="pending")continue;if(r.status==="expired")throw new w("Login expired. Run dun auth login again.",o.AUTH);if(r.status==="denied")throw new w("Login was denied in the browser.",o.AUTH);if(r.status==="approved"){let m=r.token,O={...e,token:m},A=D(O),T=await A.get("/api/user/profile"),U={...e.config,apiUrl:e.apiUrl,token:m,defaultWorkspaceId:r.workspaceId||e.config.defaultWorkspaceId,defaultWorkspaceSlug:e.config.defaultWorkspaceSlug,defaultWorkspaceName:e.config.defaultWorkspaceName};if(r.workspaceId)try{let b=(await A.get("/api/workspaces")).find((_)=>_.id===r.workspaceId);if(b)U.defaultWorkspaceId=b.id,U.defaultWorkspaceSlug=b.slug,U.defaultWorkspaceName=b.name}catch{}await J(U),N({user:{id:T.id,name:T.name,email:T.email},workspaceId:U.defaultWorkspaceId??null,configPath:L(),method:"device",message:U.defaultWorkspaceId?"Logged in.":"Logged in. Next: dun workspace list && dun workspace use <id|slug>"},e);return}}throw new w("Login timed out. Run dun auth login again.",o.AUTH)}async function Pe(e){await oe(),N({message:"Logged out. Config cleared.",configPath:L()},e)}async function se(e){R(e);let u=await D(e).get("/api/user/profile");N({id:u.id,name:u.name,email:u.email,image:u.image??null,apiUrl:e.apiUrl,workspaceId:e.workspaceId??null},e)}async function Se(e){let n=Boolean(e.token),u=null,t=null;if(n)try{u=await D(e).get("/api/user/profile")}catch(y){t=y instanceof Error?y.message:String(y)}N({authenticated:Boolean(u),tokenPresent:n,apiUrl:e.apiUrl,workspaceId:e.workspaceId??null,workspaceSlug:e.config.defaultWorkspaceSlug??null,workspaceName:e.config.defaultWorkspaceName??null,configPath:L(),user:u?{id:u.id,name:u.name,email:u.email}:null,error:t},e)}function Ee(e){return new Promise((n)=>setTimeout(n,e))}async function fe(e){let n=process.platform,u=n==="darwin"?["open",e]:n==="win32"?["cmd","/c","start","",e]:["xdg-open",e];await Bun.spawn(u,{stdout:"ignore",stderr:"ignore"}).exited}async function Ne(e,n,u,t){R(e);let y=D(e);switch(n){case"list":case"ls":{let d=await y.get("/api/workspaces");N(d.map((i)=>({id:i.id,name:i.name,slug:i.slug,role:i.role,timezone:i.timezone,plan:i.subscription?.planName??null,status:i.subscription?.status??null})),e);return}case"use":{let d=t[0];if(!d)throw new w("Usage: dun workspace use <id|slug>",o.USAGE);let r=(await y.get("/api/workspaces")).find((m)=>m.id===d||m.slug===d);if(!r)throw new w(`Workspace not found: ${d}. Run dun workspace list`,o.NOT_FOUND);await J({...e.config,apiUrl:e.apiUrl,token:e.token,defaultWorkspaceId:r.id,defaultWorkspaceSlug:r.slug,defaultWorkspaceName:r.name}),N({id:r.id,name:r.name,slug:r.slug,role:r.role,message:`Default workspace set to ${r.name}`},e);return}case"current":{if(!e.workspaceId&&!e.config.defaultWorkspaceId)throw new w("No workspace selected. Run dun workspace use <id|slug>",o.VALIDATION);let d=e.workspaceId||e.config.defaultWorkspaceId;try{let r=(await y.get("/api/workspaces")).find((m)=>m.id===d||m.slug===d);if(r){N({id:r.id,name:r.name,slug:r.slug,role:r.role,timezone:r.timezone},e);return}}catch{}N({id:d,name:e.config.defaultWorkspaceName??null,slug:e.config.defaultWorkspaceSlug??null},e);return}default:throw new w(`Unknown workspace command "${n??""}". Try: list, use, current`,o.USAGE)}}async function Ae(e,n,u,t){R(e),k(e);let y=D(e);switch(n){case void 0:case"list":case"ls":{let d=await y.get("/api/social-accounts",{workspace:!0}),i=$(u,"platform","p")?.toLowerCase(),r=i?d.filter((m)=>{let O=(m.providerName||"").toLowerCase();return({x:["x","twitter"],twitter:["x","twitter"],linkedin:["linkedin"],"linkedin-business":["linkedin business","linkedin-business","linkedin_business"],bluesky:["bluesky"],threads:["threads"],reddit:["reddit"],pinterest:["pinterest"],instagram:["instagram"],youtube:["youtube"]}[i]??[i]).some((U)=>O.includes(U))}):d;N(r.map((m)=>({id:m.id,providerName:m.providerName,username:m.username??null,displayName:m.displayName??null,isConnected:m.isConnected,expiresAt:m.expiresAt??null})),e);return}default:throw new w(`Unknown accounts command "${n}". Try: list`,o.USAGE)}}var ve=/^(\d+)\s*(s|sec|secs|second|seconds|m|min|mins|minute|minutes|h|hr|hrs|hour|hours|d|day|days|w|week|weeks)$/i;function C(e,n=new Date){let u=e.trim();if(!u)throw new w("Empty time value",o.VALIDATION);let t=u.match(ve);if(t){let i=Number(t[1]),r=t[2].toLowerCase(),m=Ce(r)*i;return new Date(n.getTime()+m)}let y=u.match(/^in\s+(.+)$/i);if(y)return C(y[1],n);let d=new Date(u);if(Number.isNaN(d.getTime()))throw new w(`Invalid time "${e}". Use ISO-8601 (2026-06-01T09:00:00Z) or relative (2h, 30m, 1d).`,o.VALIDATION);return d}function Ce(e){switch(e){case"s":case"sec":case"secs":case"second":case"seconds":return 1000;case"m":case"min":case"mins":case"minute":case"minutes":return 60000;case"h":case"hr":case"hrs":case"hour":case"hours":return 3600000;case"d":case"day":case"days":return 86400000;case"w":case"week":case"weeks":return 604800000;default:throw new w(`Unknown time unit: ${e}`,o.VALIDATION)}}function Z(e){if(e.at&&e.in)throw new w("Pass only one of --at or --in",o.VALIDATION);if(e.at)return C(e.at).toISOString();if(e.in)return C(e.in).toISOString();throw new w("Schedule time required. Pass --at <iso> or --in <duration> (e.g. 2h).",o.VALIDATION)}function Ue(e){if(!e)return[];return e.split(",").map((n)=>n.trim()).filter(Boolean)}function $e(e){let n=$(e,"text","content","c","t");if(!n)throw new w("Missing --text",o.VALIDATION);return n}function c(e){let n=p(e,"accounts","account","a")??Ue($(e,"accounts","account","a"));if(!n||n.length===0)throw new w("Missing --accounts <id,id>",o.VALIDATION);return n}function l(e){return p(e,"media","media-urls")??Ue($(e,"media","media-urls"))}function Y(e){let n=$(e,"meta","metadata","meta-json");if(!n)return;try{let u=JSON.parse(n);if(!u||typeof u!=="object"||Array.isArray(u))throw Error("metadata must be a JSON object");return u}catch(u){throw new w(`Invalid --meta JSON: ${u.message}`,o.VALIDATION)}}async function Te(e,n,u,t){R(e),k(e);let y=D(e);switch(n){case"list":case"ls":{let d=await y.get("/api/posts",{workspace:!0,query:{status:$(u,"status","s"),socialAccountId:$(u,"account","social-account"),groupId:$(u,"group"),limit:I(u,"limit")??50,offset:I(u,"offset")??0}});N(d,e);return}case"get":{let d=t[0];if(!d)throw new w("Usage: dun posts get <id>",o.USAGE);let i=await y.get(`/api/posts/${d}`,{workspace:!0});N(i,e);return}case"schedule":{let d=$e(u),i=c(u),r=Z({at:$(u,"at"),in:$(u,"in")}),m=await y.post("/api/posts/schedule",{content:d,socialAccountIds:i,scheduledAt:r,mediaUrls:l(u),metadata:Y(u)??{}},{workspace:!0});N(m,e);return}case"publish":case"publish-now":{let d=$e(u),i=c(u),r=await y.post("/api/posts/publish-now",{content:d,socialAccountIds:i,mediaUrls:l(u),metadata:Y(u)??{},naturalPosting:j(u,"natural","natural-posting")},{workspace:!0});N(r,e);return}case"reschedule":{let d=t[0];if(!d)throw new w("Usage: dun posts reschedule <id> --at|--in",o.USAGE);let r={scheduledAt:Z({at:$(u,"at"),in:$(u,"in")})},m=$(u,"text","content","c","t");if(m)r.content=m;let O=l(u);if(O.length)r.mediaUrls=O;let A=Y(u);if(A)r.metadata=A;if(!r.content){let U=await y.get(`/api/posts/${d}`,{workspace:!0});if(r.content=U.content,!r.metadata&&U.metadata)r.metadata=U.metadata;if(!r.mediaUrls&&U.mediaUrls)r.mediaUrls=U.mediaUrls}let T=await y.post(`/api/posts/${d}/reschedule`,r,{workspace:!0});N(T,e);return}case"cancel":{let d=t[0];if(!d)throw new w("Usage: dun posts cancel <id>",o.USAGE);let i=await y.post(`/api/posts/${d}/cancel`,void 0,{workspace:!0});N(i??{id:d,status:"cancelled"},e);return}case"delete":case"rm":{let d=t[0];if(!d)throw new w("Usage: dun posts delete <id> [--yes]",o.USAGE);if(!e.yes&&!j(u,"yes","y"))throw new w("Refusing to delete without --yes (or CI/yes mode)",o.VALIDATION);let i=await y.delete(`/api/posts/${d}`,void 0,{workspace:!0});N(i??{id:d,deleted:!0},e);return}case"x-cap":case"xcap":{let d=await y.get("/api/posts/x-cap-usage",{workspace:!0});N(d,e);return}case"schedule-thread":case"publish-thread":case"publish-thread-now":{let d=$(u,"file","f"),i=$(u,"account","accounts","a")??c(u)[0];if(!i)throw new w("Missing --account <xAccountId>",o.VALIDATION);let r;if(d){let O=await Bun.file(d).text(),A=JSON.parse(O);if(Array.isArray(A))r=A;else if(A&&typeof A==="object"&&Array.isArray(A.tweets))r=A.tweets;else throw new w("Thread file must be an array of tweets or { tweets: [] }",o.VALIDATION)}else{let O=$(u,"text","content");if(!O)throw new w("Provide --file thread.json (array of {content}) or informal --text with || separators is not enough alone for threads — use --file",o.VALIDATION);r=O.split("||").map((A)=>({content:A.trim()})).filter((A)=>A.content)}if(r.length<2)throw new w("Threads require at least 2 tweets",o.VALIDATION);if(n==="schedule-thread"){let O=Z({at:$(u,"at"),in:$(u,"in")}),A=await y.post("/api/posts/schedule-thread",{socialAccountId:i,tweets:r,scheduledAt:O,metadata:Y(u)??{}},{workspace:!0});N(A,e);return}let m=await y.post("/api/posts/publish-thread-now",{socialAccountId:i,tweets:r,metadata:Y(u)??{}},{workspace:!0});N(m,e);return}default:throw new w(`Unknown posts command "${n??""}". Try: list, get, schedule, publish, reschedule, cancel, delete, x-cap, schedule-thread, publish-thread`,o.USAGE)}}async function De(e,n,u,t){R(e),k(e);let y=D(e);switch(n){case"list":case"ls":{let d=await y.get("/api/drafts",{workspace:!0,query:{limit:I(u,"limit")??50,offset:I(u,"offset")??0}});N(d,e);return}case"get":{let d=t[0];if(!d)throw new w("Usage: dun drafts get <id>",o.USAGE);let i=await y.get(`/api/drafts/${d}`,{workspace:!0});N(i,e);return}case"create":{let d=$(u,"text","content","c","t");if(!d)throw new w("Missing --text",o.VALIDATION);let i=await y.post("/api/drafts",{content:d,name:$(u,"name","n"),socialAccountIds:p(u,"accounts","account","a")??[],selectedPlatforms:p(u,"platforms","platform","p")??[],mediaUrls:p(u,"media")??[]},{workspace:!0});N(i,e);return}case"update":{let d=t[0];if(!d)throw new w("Usage: dun drafts update <id> --text ...",o.USAGE);let i={id:d},r=$(u,"text","content","c","t");if(r)i.content=r;let m=$(u,"name","n");if(m!==void 0)i.name=m;let O=p(u,"accounts","account","a");if(O)i.socialAccountIds=O;let A=p(u,"platforms","platform","p");if(A)i.selectedPlatforms=A;let T=p(u,"media");if(T)i.mediaUrls=T;let U=await y.patch(`/api/drafts/${d}`,i,{workspace:!0});N(U,e);return}case"delete":case"rm":{let d=t[0];if(!d)throw new w("Usage: dun drafts delete <id> [--yes]",o.USAGE);if(!e.yes&&!j(u,"yes","y"))throw new w("Refusing to delete without --yes",o.VALIDATION);let i=await y.delete(`/api/drafts/${d}`,void 0,{workspace:!0});N(i??{id:d,deleted:!0},e);return}default:throw new w(`Unknown drafts command "${n??""}". Try: list, get, create, update, delete`,o.USAGE)}}import{basename as ce}from"node:path";function le(e){let n=e.split(".").pop()?.toLowerCase()??"";return{jpg:"image/jpeg",jpeg:"image/jpeg",png:"image/png",gif:"image/gif",webp:"image/webp",mp4:"video/mp4",mov:"video/quicktime",webm:"video/webm"}[n]??"application/octet-stream"}async function Re(e,n,u,t){R(e),k(e);let y=D(e);switch(n){case"list":case"ls":{let d=await y.get("/api/media",{workspace:!0,query:{limit:I(u,"limit")??50,offset:I(u,"offset")??0}});N(d,e);return}case"get":{let d=t[0];if(!d)throw new w("Usage: dun media get <id>",o.USAGE);let i=await y.get(`/api/media/${d}`,{workspace:!0});N(i,e);return}case"upload":{let d=t[0]||$(u,"file","f");if(!d)throw new w('Usage: dun media upload <file> [--alt "..."]',o.USAGE);let i=Bun.file(d);if(!await i.exists())throw new w(`File not found: ${d}`,o.VALIDATION);let m=ce(d),O=$(u,"mime","type","content-type")||i.type||le(m),A=i.size,T=$(u,"alt","alt-text"),U=await y.post("/api/media/upload-url",{filename:m,mimeType:O,fileSize:A},{workspace:!0});H(e.debug,`PUT ${U.uploadUrl}`,{storageKey:U.storageKey,fileSize:A});let V=await i.arrayBuffer(),b;try{b=await fetch(U.uploadUrl,{method:"PUT",headers:{"Content-Type":O,"Content-Length":String(A)},body:V})}catch(z){throw new w(`Upload PUT failed: ${z.message}`,o.NETWORK)}if(!b.ok){let z=await b.text().catch(()=>"");throw new w(`Upload PUT failed with HTTP ${b.status}${z?`: ${z.slice(0,200)}`:""}`,o.NETWORK)}let _=await y.post("/api/media/complete",{storageKey:U.storageKey,originalFilename:m,mimeType:O,fileSize:A,altText:T},{workspace:!0});N(_,e);return}case"delete":case"rm":{let d=t[0];if(!d)throw new w("Usage: dun media delete <id> [--yes]",o.USAGE);if(!e.yes&&!j(u,"yes","y"))throw new w("Refusing to delete without --yes",o.VALIDATION);let i=await y.delete(`/api/media/${d}`,void 0,{workspace:!0});N(i??{id:d,deleted:!0},e);return}default:throw new w(`Unknown media command "${n??""}". Try: list, get, upload, delete`,o.USAGE)}}async function be(e,n,u,t){R(e),k(e);let y=D(e),d=n[0];if(d==="collections"||d==="collection"){let i=n[1]||"list";switch(i){case"list":case"ls":{let r=await y.get("/api/memory/collections",{workspace:!0});N(r,e);return}case"create":{let r=$(u,"name","n");if(!r)throw new w("Missing --name",o.VALIDATION);let m=await y.post("/api/memory/collections",{name:r,color:$(u,"color")??"blue",isPrivate:j(u,"private")},{workspace:!0});N(m,e);return}case"get":{let r=n[2]||t[0];if(!r)throw new w("Usage: dun memory collections get <id>",o.USAGE);let m=await y.get(`/api/memory/collections/${r}`,{workspace:!0});N(m,e);return}default:throw new w(`Unknown memory collections command "${i}". Try: list, create, get`,o.USAGE)}}switch(d){case"list":case"ls":{let i=$(u,"collection","collection-id","c");if(!i)throw new w("Missing --collection <id>",o.VALIDATION);let r=await y.get("/api/memory",{workspace:!0,query:{collectionId:i,limit:I(u,"limit")??100}});N(r,e);return}case"save":case"add":{let i=$(u,"collection","collection-id","c"),r=$(u,"text","t");if(!i)throw new w("Missing --collection <id>",o.VALIDATION);if(!r)throw new w("Missing --text",o.VALIDATION);let m=await y.post("/api/memory",{collectionId:i,text:r},{workspace:!0});N(m,e);return}case"search":{let i=$(u,"prompt","q","query","text"),r=p(u,"collections","collection","collection-ids","c")??[];if(!i)throw new w("Missing --prompt",o.VALIDATION);if(r.length===0)throw new w("Missing --collections <id,id>",o.VALIDATION);let m=await y.post("/api/memory/search",{prompt:i,collectionIds:r,topK:I(u,"top-k","topk","k")??5},{workspace:!0});N(m,e);return}case"delete":case"rm":{let i=n[1]||t[0],r=$(u,"collection","collection-id","c");if(!i)throw new w("Usage: dun memory delete <id> --collection <id>",o.USAGE);if(!r)throw new w("Missing --collection <id>",o.VALIDATION);if(!e.yes&&!j(u,"yes","y"))throw new w("Refusing to delete without --yes",o.VALIDATION);let m=await y.delete(`/api/memory/${i}`,{collectionId:r,memoryId:i},{workspace:!0});N(m??{id:i,deleted:!0},e);return}default:throw new w(`Unknown memory command "${d??""}". Try: collections, list, save, search, delete`,o.USAGE)}}import{mkdir as g,writeFile as x,readFile as ke}from"node:fs/promises";import{dirname as B,join as h}from"node:path";import{homedir as a}from"node:os";import{fileURLToPath as ge}from"node:url";function ee(){let e=B(ge(import.meta.url));return h(e,"..","..","skills","dunsocial","SKILL.md")}async function xe(){try{return await ke(ee(),"utf8")}catch{throw new w(`Bundled skill not found at ${ee()}. Reinstall @dunsocial/cli.`,o.USAGE)}}async function je(e,n,u,t){switch(n){case"path":{N({path:ee()},e);return}case"install":{let y=(t[0]||"").toLowerCase();if(!y||y!=="claude"&&y!=="codex")throw new w("Usage: dun skill install claude|codex",o.USAGE);let d=await xe();if(y==="claude"){let _=h(a(),".claude","skills","dunsocial","SKILL.md");await g(B(_),{recursive:!0}),await x(_,d,"utf8"),N({target:"claude",path:_,message:"Installed DunSocial skill for Claude Code. Restart or open a new session if needed."},e);return}let i=h(a(),".codex","skills","dunsocial","SKILL.md");await g(B(i),{recursive:!0}),await x(i,d,"utf8");let r=h(a(),".codex","AGENTS.md");await g(B(r),{recursive:!0});let m="";try{m=await ke(r,"utf8")}catch{m=""}let O=["<!-- BEGIN DUNSOCIAL CLI SKILL -->","## DunSocial CLI","","Use the `dun` CLI for DunSocial scheduling from the shell. Prefer `--json` output.",`Skill details: ${i}`,"","Common flow:","1. `dun auth status --json`","2. `dun workspace list --json` / `dun workspace use <id>`","3. `dun accounts list --json`",'4. `dun posts schedule --text "..." --accounts <id> --in 1h --json`',"<!-- END DUNSOCIAL CLI SKILL -->"].join(`
+`),A="<!-- BEGIN DUNSOCIAL CLI SKILL -->",T="<!-- END DUNSOCIAL CLI SKILL -->",U,V=m.indexOf(A),b=m.indexOf(T);if(V!==-1&&b!==-1&&b>V)U=m.slice(0,V)+O+m.slice(b+T.length);else if(m.trim())U=`${m.trimEnd()}
+
+${O}
+`;else U=`${O}
+`;await x(r,U,"utf8"),N({target:"codex",skillPath:i,agentsPath:r,message:"Installed DunSocial skill for Codex."},e);return}default:throw new w(`Unknown skill command "${n??""}". Try: install, path`,o.USAGE)}}async function ae(e){let n=re(e),{group:u,action:t,nest:y,flags:d,positionals:i}=n;if(q(d)&&!u)return process.stdout.write(`${W}
+`),G.OK;if(u==="help"||!u&&F(d)){let m=u==="help"?t||i[0]:void 0;return process.stdout.write(m?`${f(m)}
+`:`${X}
+`),G.OK}if(!u)return process.stdout.write(`${X}
+`),G.OK;if(F(d))return process.stdout.write(`${f(u)}
+`),G.OK;let r=await de({apiUrl:M(d,"api-url","apiUrl"),token:M(d,"token"),workspace:M(d,"workspace","w"),json:K(d,"json","j")?!0:void 0,debug:K(d,"debug"),quiet:K(d,"quiet","q"),yes:K(d,"yes","y")});if(q(d))return s({version:W},r),G.OK;try{switch(u){case"auth":await Oe(r,t,d,i);break;case"workspace":case"workspaces":await Ne(r,t,d,i);break;case"account":case"accounts":await Ae(r,t??"list",d,i);break;case"post":case"posts":await Te(r,t,d,i);break;case"draft":case"drafts":await De(r,t,d,i);break;case"media":await Re(r,t,d,i);break;case"memory":{let m=y?[y,t].filter(Boolean):t?[t]:[];await be(r,m,d,i);break}case"skill":case"skills":await je(r,t,d,i);break;case"version":s({version:W},r);break;default:throw new S(`Unknown command "${u}". Run dun --help`,G.USAGE)}return G.OK}catch(m){return ie(m,r)}}var en=await ae(process.argv.slice(2));process.exit(en);

package/package.json

@@ -0,0 +1,55 @@
+{
+	"name": "dunsocial",
+	"version": "0.2.0",
+	"description": "DunSocial agent-first CLI — schedule and publish social posts from the terminal, CI, and coding agents",
+	"type": "module",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/thisuxhq/dunpostsapp.git",
+		"directory": "apps/cli"
+	},
+	"bugs": {
+		"url": "https://github.com/thisuxhq/dunpostsapp/issues"
+	},
+	"homepage": "https://dunsocial.com",
+	"keywords": [
+		"dunsocial",
+		"cli",
+		"social-media",
+		"scheduler",
+		"ai-agent",
+		"mcp"
+	],
+	"bin": {
+		"dun": "./dist/index.js",
+		"dunsocial": "./dist/index.js"
+	},
+	"files": [
+		"dist",
+		"skills",
+		"README.md",
+		"LICENSE"
+	],
+	"publishConfig": {
+		"access": "public"
+	},
+	"engines": {
+		"node": ">=20"
+	},
+	"packageManager": "bun@1.3.8",
+	"scripts": {
+		"dev": "bun run src/index.ts",
+		"start": "bun run src/index.ts",
+		"build": "bun build ./src/index.ts --outdir ./dist --target node --minify --sourcemap=none && bun run scripts/postbuild.ts",
+		"type-check": "tsc --noEmit",
+		"test": "bun test",
+		"release-check": "bun run scripts/release-check.ts",
+		"prepack": "bun run build && bun run release-check"
+	},
+	"devDependencies": {
+		"@types/bun": "latest",
+		"@types/node": "^22",
+		"typescript": "^5.9.2"
+	}
+}

package/skills/dunsocial/SKILL.md

@@ -0,0 +1,134 @@
+---
+name: dunsocial
+description: Schedule, publish, and manage DunSocial posts, drafts, media, and memory from the shell via the dun CLI. Use when the user wants to post or schedule to X/LinkedIn/Bluesky/Threads/Reddit/Pinterest/Instagram/YouTube through DunSocial, manage drafts or media uploads, search workspace memory, or wire social publishing into CI/agent workflows.
+---
+
+# DunSocial CLI skill
+
+Use the `dun` binary (`@dunsocial/cli`). Prefer **`--json`** on every command so output is machine-parseable.
+
+Remote hosts (ChatGPT web, Claude web) should keep using the DunSocial **MCP** server. This CLI is for **local agents, terminals, and CI**.
+
+## Auth + workspace
+
+```bash
+# Interactive (opens browser device login)
+dun auth login
+
+# CI / headless — prefer PAT from Settings → CLI (dun_pat_…)
+export DUN_TOKEN="$DUN_PAT" DUN_WORKSPACE_ID="$DUN_WORKSPACE_ID"
+# legacy full session also works:
+dun auth login --token "$DUN_TOKEN" --json
+
+dun auth status --json
+dun workspace list --json
+dun workspace use <id-or-slug> --json
+```
+
+Env overrides (highest priority for CI):
+
+- `DUN_TOKEN`
+- `DUN_WORKSPACE_ID`
+- `DUN_API_URL` (default `https://api.dunsocial.com`)
+
+Config file: `~/.config/dunsocial/config.json` (mode 0600).
+
+## Discovery order (always)
+
+1. `dun auth status --json` — confirm auth
+2. `dun workspace current --json` or `list` + `use`
+3. `dun accounts list --json` — capture social account **ids**
+4. Act (schedule/publish/draft/media/memory)
+
+Do **not** invent account IDs. Do **not** treat `drafts create` as a successful publish.
+
+## Schedule a post
+
+```bash
+dun posts schedule \
+  --text "Shipped the DunSocial CLI for agents." \
+  --accounts acc_x,acc_li \
+  --in 1h \
+  --json
+```
+
+Or absolute time:
+
+```bash
+dun posts schedule --text "..." --accounts acc_x --at 2026-06-01T09:00:00Z --json
+```
+
+## Publish now
+
+```bash
+dun posts publish --text "Hello from dun" --accounts acc_x --json
+```
+
+## Upload media then post
+
+```bash
+dun media upload ./shot.png --alt "Product screenshot" --json
+# use returned asset id:
+dun posts schedule --text "..." --accounts acc_x --media <assetId> --in 30m --json
+```
+
+## Drafts
+
+```bash
+dun drafts create --text "WIP idea" --platforms x,linkedin --json
+dun drafts list --json
+```
+
+## Memory
+
+```bash
+dun memory collections list --json
+dun memory save --collection <id> --text "We never promise same-day enterprise onboarding." --json
+dun memory search --prompt "onboarding promises" --collections <id> --json
+```
+
+## Threads (X)
+
+```bash
+# thread.json => [ {"content":"1"}, {"content":"2"} ]  or { "tweets": [...] }
+dun posts schedule-thread --account acc_x --file ./thread.json --in 2h --json
+dun posts publish-thread --account acc_x --file ./thread.json --json
+```
+
+## Destructive ops
+
+Require `--yes` (or `CI=1`) for `delete` commands.
+
+## Exit codes
+
+| Code | Meaning |
+|------|---------|
+| 0 | ok |
+| 1 | usage |
+| 2 | auth |
+| 3 | forbidden |
+| 4 | validation |
+| 5 | not found |
+| 6 | rate limited |
+| 7 | network |
+
+On failure with `--json`:
+
+```json
+{ "ok": false, "error": { "code": "validation", "message": "...", "details": null } }
+```
+
+## Pitfalls
+
+- Workspace is required for almost every command after login (`workspace use` or `--workspace` / `DUN_WORKSPACE_ID`).
+- `--accounts` takes DunSocial **social account ids**, not handles.
+- Local files must be uploaded via `media upload` before referencing in posts (unless you already have an asset id / storage key).
+- Platform-specific metadata (Reddit/IG/Pinterest) can be passed as `--meta '{"reddit":{...}}'` JSON when needed; prefer dedicated product flows in the dashboard for complex cases.
+- MCP OAuth scopes and CLI bearer sessions are different paths — fixing one does not fix the other.
+
+## Help
+
+```bash
+dun --help
+dun posts --help
+```