noslop 0.1.0 → 0.2.0

package/dist/lib/x-api.d.ts

@@ -0,0 +1,49 @@
+import type { XCredentials } from './config.js';
+/**
+ * Response from posting a tweet
+ */
+export interface PostedTweet {
+    id: string;
+    text: string;
+    url: string;
+}
+/**
+ * Post a tweet using X API v2
+ */
+export declare function postTweet(text: string, credentials: XCredentials): Promise<PostedTweet>;
+/**
+ * Delete a tweet using X API v2
+ */
+export declare function deleteTweet(tweetId: string, credentials: XCredentials): Promise<void>;
+/**
+ * Verify credentials by getting the authenticated user
+ */
+export declare function verifyCredentials(credentials: XCredentials): Promise<{
+    id: string;
+    username: string;
+} | null>;
+/**
+ * OAuth 1.0a request token response
+ */
+export interface OAuthRequestToken {
+    oauthToken: string;
+    oauthTokenSecret: string;
+    authorizeUrl: string;
+}
+/**
+ * OAuth 1.0a access token response
+ */
+export interface OAuthAccessToken {
+    accessToken: string;
+    accessTokenSecret: string;
+    userId: string;
+    screenName: string;
+}
+/**
+ * Get OAuth request token (step 1 of PIN flow)
+ */
+export declare function getOAuthRequestToken(apiKey: string, apiSecret: string): Promise<OAuthRequestToken>;
+/**
+ * Exchange PIN for access token (step 3 of PIN flow)
+ */
+export declare function getOAuthAccessToken(apiKey: string, apiSecret: string, oauthToken: string, oauthTokenSecret: string, pin: string): Promise<OAuthAccessToken>;

package/dist/lib/x-api.js

@@ -0,0 +1,208 @@
+import crypto from 'crypto';
+const API_BASE = 'https://api.twitter.com/2';
+/**
+ * Generate OAuth 1.0a signature
+ */
+function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {
+    const signatureBaseString = [
+        method.toUpperCase(),
+        encodeURIComponent(url),
+        encodeURIComponent(Object.keys(params)
+            .sort()
+            .map(k => `${encodeURIComponent(k)}=${encodeURIComponent(params[k])}`)
+            .join('&')),
+    ].join('&');
+    const signingKey = `${encodeURIComponent(consumerSecret)}&${encodeURIComponent(tokenSecret)}`;
+    return crypto.createHmac('sha1', signingKey).update(signatureBaseString).digest('base64');
+}
+/**
+ * Generate OAuth 1.0a Authorization header
+ */
+function generateOAuthHeader(method, url, credentials, bodyParams = {}) {
+    const oauthParams = {
+        oauth_consumer_key: credentials.apiKey,
+        oauth_nonce: crypto.randomBytes(16).toString('hex'),
+        oauth_signature_method: 'HMAC-SHA1',
+        oauth_timestamp: Math.floor(Date.now() / 1000).toString(),
+        oauth_token: credentials.accessToken,
+        oauth_version: '1.0',
+    };
+    // Include body params in signature for POST requests
+    const allParams = { ...oauthParams, ...bodyParams };
+    oauthParams.oauth_signature = generateOAuthSignature(method, url, allParams, credentials.apiSecret, credentials.accessTokenSecret);
+    const headerString = Object.keys(oauthParams)
+        .sort()
+        .map(k => `${encodeURIComponent(k)}="${encodeURIComponent(oauthParams[k])}"`)
+        .join(', ');
+    return `OAuth ${headerString}`;
+}
+/**
+ * Post a tweet using X API v2
+ */
+export async function postTweet(text, credentials) {
+    const url = `${API_BASE}/tweets`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: generateOAuthHeader('POST', url, credentials),
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ text }),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to post tweet (${response.status}): ${errorText}`);
+    }
+    const result = (await response.json());
+    return {
+        id: result.data.id,
+        text: result.data.text,
+        url: `https://x.com/${credentials.screenName}/status/${result.data.id}`,
+    };
+}
+/**
+ * Delete a tweet using X API v2
+ */
+export async function deleteTweet(tweetId, credentials) {
+    const url = `${API_BASE}/tweets/${tweetId}`;
+    const response = await fetch(url, {
+        method: 'DELETE',
+        headers: {
+            Authorization: generateOAuthHeader('DELETE', url, credentials),
+        },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to delete tweet (${response.status}): ${errorText}`);
+    }
+}
+/**
+ * Verify credentials by getting the authenticated user
+ */
+export async function verifyCredentials(credentials) {
+    const url = `${API_BASE}/users/me`;
+    try {
+        const response = await fetch(url, {
+            method: 'GET',
+            headers: {
+                Authorization: generateOAuthHeader('GET', url, credentials),
+            },
+        });
+        if (!response.ok) {
+            return null;
+        }
+        const result = (await response.json());
+        return {
+            id: result.data.id,
+            username: result.data.username,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+// ============================================
+// OAuth PIN Flow (for authentication)
+// ============================================
+const OAUTH_BASE = 'https://api.twitter.com/oauth';
+/**
+ * Generate OAuth signature for requests without access token (request_token flow)
+ */
+function generateOAuthSignatureForRequestToken(method, url, params, consumerSecret, tokenSecret = '') {
+    const signatureBaseString = [
+        method.toUpperCase(),
+        encodeURIComponent(url),
+        encodeURIComponent(Object.keys(params)
+            .sort()
+            .map(k => `${encodeURIComponent(k)}=${encodeURIComponent(params[k])}`)
+            .join('&')),
+    ].join('&');
+    const signingKey = `${encodeURIComponent(consumerSecret)}&${encodeURIComponent(tokenSecret)}`;
+    return crypto.createHmac('sha1', signingKey).update(signatureBaseString).digest('base64');
+}
+/**
+ * Get OAuth request token (step 1 of PIN flow)
+ */
+export async function getOAuthRequestToken(apiKey, apiSecret) {
+    const url = `${OAUTH_BASE}/request_token`;
+    const oauthParams = {
+        oauth_callback: 'oob', // PIN-based flow
+        oauth_consumer_key: apiKey,
+        oauth_nonce: crypto.randomBytes(16).toString('hex'),
+        oauth_signature_method: 'HMAC-SHA1',
+        oauth_timestamp: Math.floor(Date.now() / 1000).toString(),
+        oauth_version: '1.0',
+    };
+    oauthParams.oauth_signature = generateOAuthSignatureForRequestToken('POST', url, oauthParams, apiSecret);
+    const headerString = Object.keys(oauthParams)
+        .sort()
+        .map(k => `${encodeURIComponent(k)}="${encodeURIComponent(oauthParams[k])}"`)
+        .join(', ');
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: `OAuth ${headerString}`,
+        },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to get request token: ${errorText}`);
+    }
+    const text = await response.text();
+    const params = new URLSearchParams(text);
+    const oauthToken = params.get('oauth_token');
+    const oauthTokenSecret = params.get('oauth_token_secret');
+    if (!oauthToken || !oauthTokenSecret) {
+        throw new Error('Invalid response from request_token endpoint');
+    }
+    return {
+        oauthToken,
+        oauthTokenSecret,
+        authorizeUrl: `${OAUTH_BASE}/authorize?oauth_token=${oauthToken}`,
+    };
+}
+/**
+ * Exchange PIN for access token (step 3 of PIN flow)
+ */
+export async function getOAuthAccessToken(apiKey, apiSecret, oauthToken, oauthTokenSecret, pin) {
+    const url = `${OAUTH_BASE}/access_token`;
+    const oauthParams = {
+        oauth_consumer_key: apiKey,
+        oauth_nonce: crypto.randomBytes(16).toString('hex'),
+        oauth_signature_method: 'HMAC-SHA1',
+        oauth_timestamp: Math.floor(Date.now() / 1000).toString(),
+        oauth_token: oauthToken,
+        oauth_verifier: pin,
+        oauth_version: '1.0',
+    };
+    oauthParams.oauth_signature = generateOAuthSignatureForRequestToken('POST', url, oauthParams, apiSecret, oauthTokenSecret);
+    const headerString = Object.keys(oauthParams)
+        .sort()
+        .map(k => `${encodeURIComponent(k)}="${encodeURIComponent(oauthParams[k])}"`)
+        .join(', ');
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: `OAuth ${headerString}`,
+        },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to get access token: ${errorText}`);
+    }
+    const text = await response.text();
+    const params = new URLSearchParams(text);
+    const accessToken = params.get('oauth_token');
+    const accessTokenSecret = params.get('oauth_token_secret');
+    const userId = params.get('user_id');
+    const screenName = params.get('screen_name');
+    if (!accessToken || !accessTokenSecret) {
+        throw new Error('Invalid response from access_token endpoint');
+    }
+    return {
+        accessToken,
+        accessTokenSecret,
+        userId: userId || '',
+        screenName: screenName || '',
+    };
+}

package/dist/lib/x-api.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/x-api.test.js

@@ -0,0 +1,23 @@
+import { describe, it, expect } from 'vitest';
+import { postTweet, deleteTweet, verifyCredentials, getOAuthRequestToken, getOAuthAccessToken, } from './x-api.js';
+describe('x-api', () => {
+    describe('exports', () => {
+        it('exports postTweet function', () => {
+            expect(typeof postTweet).toBe('function');
+        });
+        it('exports deleteTweet function', () => {
+            expect(typeof deleteTweet).toBe('function');
+        });
+        it('exports verifyCredentials function', () => {
+            expect(typeof verifyCredentials).toBe('function');
+        });
+        it('exports getOAuthRequestToken function', () => {
+            expect(typeof getOAuthRequestToken).toBe('function');
+        });
+        it('exports getOAuthAccessToken function', () => {
+            expect(typeof getOAuthAccessToken).toBe('function');
+        });
+    });
+    // Note: Integration tests would require actual X API credentials
+    // and are not included in unit tests to avoid rate limits and auth issues
+});

package/dist/tui.js

@@ -3,7 +3,7 @@ import { useState, useEffect, useMemo } from 'react';
 import { render, Box, Text, useInput, useApp, useStdout } from 'ink';
 import Link from 'ink-link';
 import fs from 'fs';
-import { getContentDirs, parseContent, updateStatus as updateStatusLib, moveToPosts as moveToPostsLib, moveToDrafts, addPublishedUrl, deleteDraft, } from './lib/content.js';
+import { getContentDirs, parseContent, updateStatus as updateStatusLib, moveToPosts as moveToPostsLib, addPublishedUrl, deleteDraft, } from './lib/content.js';
 /** Month abbreviations for date display */
 const MONTHS = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
 /**
@@ -134,9 +134,9 @@ function Preview({ item, width, height, isPosts, }) {
                     })(), item.published && item.published.startsWith('http') ? (_jsxs(Text, { children: [_jsx(Text, { color: "green", children: "\u2713 " }), _jsx(Link, { url: item.published, fallback: false, children: _jsx(Text, { color: "cyan", children: item.published.slice(0, contentWidth) }) })] })) : (_jsxs(Text, { children: [_jsx(Text, { color: "yellow", children: "\u25CB " }), _jsx(Text, { color: "gray", children: "not published" })] }))] }), _jsx(Text, { color: "gray", children: '─'.repeat(contentWidth) }), _jsx(Box, { children: (() => {
                     if (isPosts) {
                         if (item.published?.startsWith('http')) {
-                            return _jsx(Text, { color: "gray", children: "Space: unpost" });
+                            return _jsx(Text, { color: "gray", children: " " });
                         }
-                        return _jsx(Text, { color: "gray", children: "Enter: add URL \u2502 Space: unpost" });
+                        return _jsx(Text, { color: "gray", children: "Enter: add URL" });
                     }
                     return (_jsxs(Text, { color: "gray", children: ["Enter: toggle ready \u2502 Space: post", !isReady ? ' │ Backspace: delete' : ''] }));
                 })() })] }));
@@ -341,19 +341,12 @@ function App() {
                 setUrlInput('');
             }
         }
-        // Space: move draft to posts, or unpost post
-        if (input === ' ' && selected) {
-            if (tab === 'drafts') {
-                moveToPostsLib(selected);
-                setTab('posts');
-                setSelectedIndex(0);
-                setRefreshKey((r) => r + 1);
-            }
-            else {
-                moveToDrafts(selected);
-                setSelectedIndex(0);
-                setRefreshKey((r) => r + 1);
-            }
+        // Space: move draft to posts
+        if (input === ' ' && selected && tab === 'drafts') {
+            moveToPostsLib(selected);
+            setTab('posts');
+            setSelectedIndex(0);
+            setRefreshKey((r) => r + 1);
         }
         // Backspace/Delete: delete in-progress draft
         if ((key.backspace || key.delete) &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noslop",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "CLI for AI assistants to manage social media posts as markdown files",
   "type": "module",
   "bin": {
@@ -32,6 +32,10 @@
     "typecheck": "tsc --noEmit",
     "check": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test",
     "clean": "rm -rf dist",
+    "release": "pnpm check && pnpm release:patch",
+    "release:patch": "npm version patch && git push && git push --tags && gh release create v$(node -p \"require('./package.json').version\") --generate-notes",
+    "release:minor": "npm version minor && git push && git push --tags && gh release create v$(node -p \"require('./package.json').version\") --generate-notes",
+    "release:major": "npm version major && git push && git push --tags && gh release create v$(node -p \"require('./package.json').version\") --generate-notes",
     "prepublishOnly": "npm run build",
     "prepare": "npm run build"
   },
@@ -75,7 +79,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/rubenartus/noslop.git"
+    "url": "https://github.com/rubenartus/noslop"
   },
   "bugs": {
     "url": "https://github.com/rubenartus/noslop/issues"