thumbgate 1.4.2 → 1.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (279) hide show
  1. package/.claude-plugin/README.md +45 -34
  2. package/.claude-plugin/marketplace.json +3 -3
  3. package/.claude-plugin/plugin.json +3 -3
  4. package/.well-known/llms.txt +1 -1
  5. package/.well-known/mcp/server-card.json +1 -1
  6. package/README.md +26 -2
  7. package/adapters/README.md +4 -1
  8. package/adapters/claude/.mcp.json +2 -2
  9. package/adapters/codex/config.toml +2 -2
  10. package/adapters/mcp/server-stdio.js +10 -4
  11. package/adapters/opencode/opencode.json +1 -1
  12. package/bin/cli.js +246 -90
  13. package/config/mcp-allowlists.json +11 -3
  14. package/package.json +184 -21
  15. package/scripts/audit-trail.js +25 -15
  16. package/scripts/auto-wire-hooks.js +127 -0
  17. package/scripts/cli-demo.js +102 -0
  18. package/scripts/cli-schema.js +285 -0
  19. package/scripts/cli-status.js +166 -0
  20. package/scripts/cross-encoder-reranker.js +235 -0
  21. package/scripts/explore-subcommands.js +277 -0
  22. package/scripts/explore.js +569 -0
  23. package/scripts/feedback-loop.js +20 -6
  24. package/scripts/lesson-inference.js +7 -1
  25. package/scripts/lesson-reranker.js +263 -0
  26. package/scripts/lesson-retrieval.js +34 -17
  27. package/scripts/lesson-search.js +69 -0
  28. package/scripts/perplexity-client.js +210 -0
  29. package/scripts/reflector-agent.js +2 -2
  30. package/scripts/statusline-local-stats.js +3 -1
  31. package/scripts/statusline.sh +12 -11
  32. package/src/api/server.js +178 -17
  33. package/src/index.js +3 -0
  34. package/.claude-plugin/bundle/icon.png +0 -0
  35. package/.claude-plugin/bundle/icon.svg +0 -18
  36. package/.claude-plugin/bundle/server/index.js +0 -24
  37. package/adapters/chatgpt/INSTALL.md +0 -138
  38. package/bin/memory.sh +0 -64
  39. package/bin/obsidian-sync.sh +0 -20
  40. package/plugins/amp-skill/INSTALL.md +0 -52
  41. package/plugins/amp-skill/SKILL.md +0 -64
  42. package/plugins/claude-codex-bridge/.claude-plugin/plugin.json +0 -22
  43. package/plugins/claude-codex-bridge/.mcp.json +0 -14
  44. package/plugins/claude-codex-bridge/INSTALL.md +0 -43
  45. package/plugins/claude-codex-bridge/README.md +0 -46
  46. package/plugins/claude-codex-bridge/scripts/codex-bridge.js +0 -286
  47. package/plugins/claude-codex-bridge/skills/adversarial-review/SKILL.md +0 -24
  48. package/plugins/claude-codex-bridge/skills/result/SKILL.md +0 -22
  49. package/plugins/claude-codex-bridge/skills/review/SKILL.md +0 -28
  50. package/plugins/claude-codex-bridge/skills/second-pass/SKILL.md +0 -27
  51. package/plugins/claude-codex-bridge/skills/setup/SKILL.md +0 -21
  52. package/plugins/claude-codex-bridge/skills/status/SKILL.md +0 -19
  53. package/plugins/claude-skill/INSTALL.md +0 -55
  54. package/plugins/claude-skill/SKILL.md +0 -46
  55. package/plugins/codex-profile/.codex-plugin/plugin.json +0 -43
  56. package/plugins/codex-profile/.mcp.json +0 -14
  57. package/plugins/codex-profile/AGENTS.md +0 -20
  58. package/plugins/codex-profile/INSTALL.md +0 -89
  59. package/plugins/codex-profile/README.md +0 -61
  60. package/plugins/cursor-marketplace/.cursor-plugin/plugin.json +0 -23
  61. package/plugins/cursor-marketplace/CHANGELOG.md +0 -30
  62. package/plugins/cursor-marketplace/LICENSE +0 -21
  63. package/plugins/cursor-marketplace/README.md +0 -124
  64. package/plugins/cursor-marketplace/agents/reliability-reviewer.md +0 -31
  65. package/plugins/cursor-marketplace/assets/logo-400x400.png +0 -0
  66. package/plugins/cursor-marketplace/commands/capture-feedback.md +0 -33
  67. package/plugins/cursor-marketplace/commands/check-gates.md +0 -25
  68. package/plugins/cursor-marketplace/commands/show-lessons.md +0 -27
  69. package/plugins/cursor-marketplace/hooks/hooks.json +0 -10
  70. package/plugins/cursor-marketplace/mcp.json +0 -14
  71. package/plugins/cursor-marketplace/rules/feedback-capture.mdc +0 -34
  72. package/plugins/cursor-marketplace/rules/pre-action-gates.mdc +0 -30
  73. package/plugins/cursor-marketplace/rules/session-continuity.mdc +0 -28
  74. package/plugins/cursor-marketplace/scripts/gate-check.sh +0 -21
  75. package/plugins/cursor-marketplace/skills/capture-feedback/SKILL.md +0 -48
  76. package/plugins/cursor-marketplace/skills/prevention-rules/SKILL.md +0 -31
  77. package/plugins/cursor-marketplace/skills/recall-context/SKILL.md +0 -30
  78. package/plugins/cursor-marketplace/skills/search-lessons/SKILL.md +0 -33
  79. package/plugins/gemini-extension/INSTALL.md +0 -92
  80. package/plugins/gemini-extension/gemini_prompt.txt +0 -14
  81. package/plugins/gemini-extension/tool_contract.json +0 -45
  82. package/plugins/opencode-profile/INSTALL.md +0 -57
  83. package/public/assets/instagram-card.png +0 -0
  84. package/public/assets/tiktok-agent-memory.mp4 +0 -0
  85. package/public/blog.html +0 -474
  86. package/public/compare/mem0.html +0 -189
  87. package/public/compare/speclock.html +0 -180
  88. package/public/compare.html +0 -310
  89. package/public/dashboard.html +0 -1100
  90. package/public/guide.html +0 -317
  91. package/public/guides/claude-code-prevent-repeated-mistakes.html +0 -161
  92. package/public/guides/codex-cli-guardrails.html +0 -158
  93. package/public/guides/cursor-prevent-repeated-mistakes.html +0 -161
  94. package/public/guides/pre-action-gates.html +0 -162
  95. package/public/guides/stop-repeated-ai-agent-mistakes.html +0 -159
  96. package/public/index.html +0 -1128
  97. package/public/js/buyer-intent.js +0 -252
  98. package/public/learn/agent-harness-pattern.html +0 -180
  99. package/public/learn/ai-agent-persistent-memory.html +0 -203
  100. package/public/learn/learn.css +0 -45
  101. package/public/learn/mcp-pre-action-gates-explained.html +0 -172
  102. package/public/learn/stop-ai-agent-force-push.html +0 -134
  103. package/public/learn/vibe-coding-safety-net.html +0 -142
  104. package/public/learn.html +0 -274
  105. package/public/lessons.html +0 -967
  106. package/public/llm-context.md +0 -140
  107. package/public/pro.html +0 -1087
  108. package/public/vercel.json +0 -8
  109. package/scripts/a2ui-engine.js +0 -73
  110. package/scripts/adk-consolidator.js +0 -274
  111. package/scripts/agent-security-hardening.js +0 -225
  112. package/scripts/ai-search-visibility.js +0 -142
  113. package/scripts/autonomous-sales-agent.js +0 -39
  114. package/scripts/autoresearch-runner.js +0 -216
  115. package/scripts/background-agent-governance.js +0 -229
  116. package/scripts/behavioral-extraction.js +0 -93
  117. package/scripts/budget-enforcer.js +0 -173
  118. package/scripts/budget-guard.js +0 -173
  119. package/scripts/build-claude-mcpb.js +0 -255
  120. package/scripts/build-codex-plugin.js +0 -152
  121. package/scripts/capture-railway-diagnostics.sh +0 -97
  122. package/scripts/changeset-check.js +0 -372
  123. package/scripts/check-congruence.js +0 -443
  124. package/scripts/computer-use-firewall.js +0 -280
  125. package/scripts/content-engine/linkedin-content-generator.js +0 -154
  126. package/scripts/content-engine/output/linkedin-memento-validation.md +0 -17
  127. package/scripts/content-engine/output/linkedin-posts-2026-04-09.md +0 -175
  128. package/scripts/content-engine/reddit-thread-finder.js +0 -154
  129. package/scripts/context-engine.js +0 -710
  130. package/scripts/daily-digest.js +0 -11
  131. package/scripts/data-governance.js +0 -173
  132. package/scripts/deploy-gcp.sh +0 -44
  133. package/scripts/deploy-policy.js +0 -249
  134. package/scripts/disagreement-mining.js +0 -315
  135. package/scripts/dpo-optimizer.js +0 -206
  136. package/scripts/ensure-repo-bootstrap.js +0 -130
  137. package/scripts/ephemeral-agent-store.js +0 -212
  138. package/scripts/eval-harness.js +0 -56
  139. package/scripts/export-kto-pairs.js +0 -309
  140. package/scripts/export-training.js +0 -446
  141. package/scripts/feedback-fallback.js +0 -111
  142. package/scripts/feedback-inbox-read.js +0 -162
  143. package/scripts/feedback-root-consolidator.js +0 -233
  144. package/scripts/feedback-to-memory.js +0 -185
  145. package/scripts/gate-satisfy.js +0 -42
  146. package/scripts/generate-paperbanana-diagrams.sh +0 -99
  147. package/scripts/generate-pretool-hook.sh +0 -40
  148. package/scripts/github-about.js +0 -430
  149. package/scripts/github-outreach.js +0 -65
  150. package/scripts/gtm-revenue-loop.js +0 -535
  151. package/scripts/hallucination-detector.js +0 -226
  152. package/scripts/hf-papers.js +0 -317
  153. package/scripts/hook-auto-capture.sh +0 -100
  154. package/scripts/hook-stop-pr-thread-check.sh +0 -68
  155. package/scripts/hook-stop-self-score.sh +0 -51
  156. package/scripts/hook-stop-verify-deploy.sh +0 -31
  157. package/scripts/hook-verify-before-done.sh +0 -20
  158. package/scripts/managed-dpo-export.js +0 -91
  159. package/scripts/markdown-escape.js +0 -12
  160. package/scripts/marketing-experiment.js +0 -657
  161. package/scripts/memalign-recall.js +0 -111
  162. package/scripts/memory-migration.js +0 -296
  163. package/scripts/meta-policy.js +0 -190
  164. package/scripts/metered-billing.js +0 -16
  165. package/scripts/model-tier-router.js +0 -310
  166. package/scripts/money-watcher.js +0 -218
  167. package/scripts/multi-hop-recall.js +0 -240
  168. package/scripts/per-step-scoring.js +0 -163
  169. package/scripts/perplexity-marketing.js +0 -466
  170. package/scripts/pii-scanner.js +0 -153
  171. package/scripts/plan-gate.js +0 -154
  172. package/scripts/post-everywhere.js +0 -341
  173. package/scripts/post-to-x-retry.sh +0 -22
  174. package/scripts/post-to-x.js +0 -369
  175. package/scripts/pr-manager.js +0 -421
  176. package/scripts/principle-extractor.js +0 -162
  177. package/scripts/pro-features.js +0 -41
  178. package/scripts/prompt-dlp.js +0 -222
  179. package/scripts/prove-adapters.js +0 -860
  180. package/scripts/prove-attribution.js +0 -361
  181. package/scripts/prove-automation.js +0 -651
  182. package/scripts/prove-autoresearch.js +0 -304
  183. package/scripts/prove-claim-verification.js +0 -277
  184. package/scripts/prove-cloudflare-sandbox.js +0 -161
  185. package/scripts/prove-data-pipeline.js +0 -408
  186. package/scripts/prove-data-quality.js +0 -227
  187. package/scripts/prove-evolution.js +0 -352
  188. package/scripts/prove-harnesses.js +0 -287
  189. package/scripts/prove-intelligence.js +0 -257
  190. package/scripts/prove-lancedb.js +0 -425
  191. package/scripts/prove-local-intelligence.js +0 -340
  192. package/scripts/prove-loop-closure.js +0 -263
  193. package/scripts/prove-packaged-runtime.js +0 -326
  194. package/scripts/prove-predictive-insights.js +0 -355
  195. package/scripts/prove-runtime.js +0 -363
  196. package/scripts/prove-seo-gsd.js +0 -234
  197. package/scripts/prove-settings.js +0 -279
  198. package/scripts/prove-subway-upgrades.js +0 -277
  199. package/scripts/prove-tessl.js +0 -229
  200. package/scripts/prove-training-export.js +0 -325
  201. package/scripts/prove-workflow-contract.js +0 -112
  202. package/scripts/prove-xmemory.js +0 -332
  203. package/scripts/publish-decision.js +0 -159
  204. package/scripts/ralph-loop.js +0 -376
  205. package/scripts/ralph-mode-ci.js +0 -331
  206. package/scripts/reddit-dm-outreach.js +0 -192
  207. package/scripts/reddit-monitor-cron.sh +0 -26
  208. package/scripts/reminder-engine.js +0 -132
  209. package/scripts/revenue-status.js +0 -472
  210. package/scripts/rotate-stripe-webhook-secret.js +0 -314
  211. package/scripts/schedule-manager.js +0 -249
  212. package/scripts/self-healing-check.js +0 -193
  213. package/scripts/shieldcortex-memory-firewall-runner.mjs +0 -53
  214. package/scripts/skill-exporter.js +0 -260
  215. package/scripts/skill-materializer.js +0 -134
  216. package/scripts/skill-packs.js +0 -136
  217. package/scripts/skill-proposer.js +0 -99
  218. package/scripts/skill-quality-tracker.js +0 -282
  219. package/scripts/slow-loop.js +0 -72
  220. package/scripts/social-analytics/db/analytics.sqlite +0 -0
  221. package/scripts/social-analytics/db/schema.sql +0 -32
  222. package/scripts/social-analytics/digest.js +0 -256
  223. package/scripts/social-analytics/engagement-audit.js +0 -185
  224. package/scripts/social-analytics/generate-instagram-card.js +0 -97
  225. package/scripts/social-analytics/instagram-thumbgate-post.js +0 -111
  226. package/scripts/social-analytics/install-growth-automation.js +0 -114
  227. package/scripts/social-analytics/load-env.js +0 -77
  228. package/scripts/social-analytics/mcp-server.js +0 -289
  229. package/scripts/social-analytics/normalizer.js +0 -580
  230. package/scripts/social-analytics/notify.js +0 -162
  231. package/scripts/social-analytics/poll-all.js +0 -107
  232. package/scripts/social-analytics/pollers/github.js +0 -195
  233. package/scripts/social-analytics/pollers/instagram.js +0 -253
  234. package/scripts/social-analytics/pollers/linkedin.js +0 -340
  235. package/scripts/social-analytics/pollers/plausible.js +0 -245
  236. package/scripts/social-analytics/pollers/reddit.js +0 -306
  237. package/scripts/social-analytics/pollers/threads.js +0 -233
  238. package/scripts/social-analytics/pollers/tiktok.js +0 -203
  239. package/scripts/social-analytics/pollers/x.js +0 -227
  240. package/scripts/social-analytics/pollers/youtube.js +0 -304
  241. package/scripts/social-analytics/pollers/zernio.js +0 -183
  242. package/scripts/social-analytics/publish-instagram-thumbgate.js +0 -104
  243. package/scripts/social-analytics/publish-thumbgate-launch.js +0 -322
  244. package/scripts/social-analytics/publishers/devto.js +0 -122
  245. package/scripts/social-analytics/publishers/instagram.js +0 -317
  246. package/scripts/social-analytics/publishers/linkedin.js +0 -294
  247. package/scripts/social-analytics/publishers/reddit.js +0 -385
  248. package/scripts/social-analytics/publishers/threads.js +0 -275
  249. package/scripts/social-analytics/publishers/tiktok.js +0 -217
  250. package/scripts/social-analytics/publishers/x.js +0 -259
  251. package/scripts/social-analytics/publishers/youtube.js +0 -223
  252. package/scripts/social-analytics/publishers/zernio.js +0 -539
  253. package/scripts/social-analytics/reconcile-thumbgate-campaign.js +0 -165
  254. package/scripts/social-analytics/run-digest.js +0 -34
  255. package/scripts/social-analytics/schedule-thumbgate-campaign.js +0 -275
  256. package/scripts/social-analytics/store.js +0 -455
  257. package/scripts/social-analytics/sync-launch-assets.js +0 -185
  258. package/scripts/social-analytics/utm.js +0 -143
  259. package/scripts/social-pipeline.js +0 -2626
  260. package/scripts/social-post-hourly.js +0 -228
  261. package/scripts/social-quality-gate.js +0 -134
  262. package/scripts/social-reply-monitor.js +0 -592
  263. package/scripts/status-dashboard.js +0 -155
  264. package/scripts/stripe-live-status.js +0 -115
  265. package/scripts/subagent-profiles.js +0 -79
  266. package/scripts/sync-branch-protection.js +0 -340
  267. package/scripts/sync-gh-secrets-from-env.sh +0 -70
  268. package/scripts/sync-github-about.js +0 -55
  269. package/scripts/sync-version.js +0 -479
  270. package/scripts/synthetic-dpo.js +0 -234
  271. package/scripts/tessl-export.js +0 -369
  272. package/scripts/test-coverage.js +0 -128
  273. package/scripts/thumbgate_session_start.sh +0 -32
  274. package/scripts/train_from_feedback.py +0 -929
  275. package/scripts/validate-feedback.js +0 -581
  276. package/scripts/verify-obsidian-setup.sh +0 -269
  277. package/scripts/verify-run.js +0 -269
  278. package/scripts/weekly-auto-post.js +0 -124
  279. package/scripts/x-autonomous-marketing.js +0 -139
@@ -1,217 +0,0 @@
1
- 'use strict';
2
-
3
- /**
4
- * tiktok.js
5
- * Publishes videos to TikTok via the official Content Posting API v2.
6
- *
7
- * Required env vars:
8
- * TIKTOK_ACCESS_TOKEN — OAuth 2.0 access token with post.publish scope (required)
9
- *
10
- * TikTok API reference:
11
- * POST /v2/post/publish/video/init/ — Initiate a direct post
12
- * POST /v2/post/publish/status/fetch/ — Poll publish status
13
- */
14
-
15
- const TIKTOK_API_BASE = 'https://open.tiktokapis.com';
16
-
17
- const POLL_INTERVAL_MS = 5000;
18
- const DEFAULT_TIMEOUT_MS = 120000;
19
-
20
- /**
21
- * Initiate a TikTok video post via URL pull.
22
- *
23
- * @param {string} token - TikTok OAuth access token
24
- * @param {{ title: string, videoUrl: string, privacyLevel?: string }} options
25
- * @returns {Promise<string>} publish_id
26
- */
27
- async function initDirectPost(token, { title, videoUrl, privacyLevel }) {
28
- if (!token) throw new Error('token is required');
29
- if (!videoUrl) throw new Error('videoUrl is required');
30
- if (!title) throw new Error('title is required');
31
-
32
- const url = `${TIKTOK_API_BASE}/v2/post/publish/video/init/`;
33
- const body = {
34
- post_info: {
35
- title,
36
- privacy_level: privacyLevel || 'PUBLIC_TO_EVERYONE',
37
- },
38
- source_info: {
39
- source: 'PULL_FROM_URL',
40
- video_url: videoUrl,
41
- },
42
- };
43
-
44
- console.log(`[tiktok:publisher] Initiating post: title="${title}" url=${videoUrl}`);
45
-
46
- const res = await fetch(url, {
47
- method: 'POST',
48
- headers: {
49
- Authorization: `Bearer ${token}`,
50
- 'Content-Type': 'application/json',
51
- },
52
- body: JSON.stringify(body),
53
- });
54
-
55
- if (!res.ok) {
56
- const text = await res.text().catch(() => '');
57
- throw new Error(`TikTok API ${res.status} for ${url}: ${text}`);
58
- }
59
-
60
- const json = await res.json();
61
-
62
- if (json.error && json.error.code !== 'ok') {
63
- throw new Error(`TikTok API error: ${json.error.code} — ${json.error.message}`);
64
- }
65
-
66
- const publishId = json.data?.publish_id;
67
- if (!publishId) {
68
- throw new Error(`TikTok init post returned no publish_id. Response: ${JSON.stringify(json)}`);
69
- }
70
-
71
- console.log(`[tiktok:publisher] Post initiated. publish_id=${publishId}`);
72
- return publishId;
73
- }
74
-
75
- /**
76
- * Check the publish status of a previously initiated post.
77
- *
78
- * @param {string} token - TikTok OAuth access token
79
- * @param {string} publishId - publish_id returned from initDirectPost
80
- * @returns {Promise<object>} Status object from TikTok API
81
- */
82
- async function checkPublishStatus(token, publishId) {
83
- if (!token) throw new Error('token is required');
84
- if (!publishId) throw new Error('publishId is required');
85
-
86
- const url = `${TIKTOK_API_BASE}/v2/post/publish/status/fetch/`;
87
- const body = { publish_id: publishId };
88
-
89
- const res = await fetch(url, {
90
- method: 'POST',
91
- headers: {
92
- Authorization: `Bearer ${token}`,
93
- 'Content-Type': 'application/json',
94
- },
95
- body: JSON.stringify(body),
96
- });
97
-
98
- if (!res.ok) {
99
- const text = await res.text().catch(() => '');
100
- throw new Error(`TikTok API ${res.status} for ${url}: ${text}`);
101
- }
102
-
103
- const json = await res.json();
104
-
105
- if (json.error && json.error.code !== 'ok') {
106
- throw new Error(`TikTok API error: ${json.error.code} — ${json.error.message}`);
107
- }
108
-
109
- return json.data ?? {};
110
- }
111
-
112
- /**
113
- * Poll publish status every 5 seconds until PUBLISH_COMPLETE or a terminal failure.
114
- * Rejects if the timeout is reached before completion.
115
- *
116
- * @param {string} token - TikTok OAuth access token
117
- * @param {string} publishId - publish_id to poll
118
- * @param {number} [timeoutMs=120000] - Maximum wait time in milliseconds
119
- * @returns {Promise<object>} Final status object
120
- */
121
- async function pollPublishStatus(token, publishId, timeoutMs = DEFAULT_TIMEOUT_MS) {
122
- if (!token) throw new Error('token is required');
123
- if (!publishId) throw new Error('publishId is required');
124
-
125
- const deadline = Date.now() + timeoutMs;
126
- let attempt = 0;
127
-
128
- console.log(`[tiktok:publisher] Polling publish status for publish_id=${publishId} (timeout=${timeoutMs}ms)`);
129
-
130
- while (Date.now() < deadline) {
131
- attempt += 1;
132
- const statusData = await checkPublishStatus(token, publishId);
133
- const status = statusData.status ?? statusData.publish_status ?? 'UNKNOWN';
134
-
135
- console.log(`[tiktok:publisher] Attempt ${attempt}: status=${status}`);
136
-
137
- if (status === 'PUBLISH_COMPLETE') {
138
- console.log(`[tiktok:publisher] Video published successfully. publish_id=${publishId}`);
139
- return statusData;
140
- }
141
-
142
- // Terminal failure states reported by the TikTok API.
143
- const failureStates = ['FAILED', 'PUBLISH_FAILED', 'CANCELLED', 'ERROR'];
144
- if (failureStates.includes(status)) {
145
- throw new Error(
146
- `TikTok publish failed with status=${status}. publish_id=${publishId}. ` +
147
- `Data: ${JSON.stringify(statusData)}`
148
- );
149
- }
150
-
151
- // Not done yet — wait before the next poll.
152
- await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
153
- }
154
-
155
- throw new Error(
156
- `TikTok publish timed out after ${timeoutMs}ms. publish_id=${publishId} ` +
157
- `— video may still be processing.`
158
- );
159
- }
160
-
161
- /**
162
- * Orchestrates the full TikTok video publish flow:
163
- * 1. Initiate post via URL pull
164
- * 2. Poll until PUBLISH_COMPLETE
165
- *
166
- * @param {{ videoUrl: string, title: string, token?: string, privacyLevel?: string }} options
167
- * @returns {Promise<{ publishId: string, status: object }>}
168
- */
169
- async function publishTikTokVideo({ videoUrl, title, token, privacyLevel }) {
170
- const accessToken = token || process.env.TIKTOK_ACCESS_TOKEN;
171
- if (!accessToken) {
172
- throw new Error('TIKTOK_ACCESS_TOKEN environment variable (or token param) is required');
173
- }
174
- if (!videoUrl) throw new Error('videoUrl is required');
175
- if (!title) throw new Error('title is required');
176
-
177
- console.log(`[tiktok:publisher] Starting publish flow for "${title}"`);
178
-
179
- const publishId = await initDirectPost(accessToken, { title, videoUrl, privacyLevel });
180
- const statusResult = await pollPublishStatus(accessToken, publishId);
181
-
182
- console.log(`[tiktok:publisher] Publish complete. publish_id=${publishId}`);
183
- return { publishId, status: statusResult };
184
- }
185
-
186
- module.exports = { initDirectPost, checkPublishStatus, pollPublishStatus, publishTikTokVideo };
187
-
188
- // ---------------------------------------------------------------------------
189
- // Stand-alone execution
190
- // ---------------------------------------------------------------------------
191
- if (require.main === module) {
192
- const args = process.argv.slice(2);
193
-
194
- // Parse --video-url and --title from CLI args.
195
- function getArg(flag) {
196
- const prefix = `${flag}=`;
197
- const entry = args.find((a) => a.startsWith(prefix));
198
- return entry ? entry.slice(prefix.length) : null;
199
- }
200
-
201
- const videoUrl = getArg('--video-url');
202
- const title = getArg('--title');
203
-
204
- if (!videoUrl || !title) {
205
- console.error('Usage: node tiktok.js --video-url=<url> --title=<title>');
206
- process.exit(1);
207
- }
208
-
209
- publishTikTokVideo({ videoUrl, title })
210
- .then(({ publishId, status }) => {
211
- console.log(`[tiktok:publisher] Done. publish_id=${publishId} status=${JSON.stringify(status)}`);
212
- })
213
- .catch((err) => {
214
- console.error('[tiktok:publisher] Publish failed:', err.message);
215
- process.exit(1);
216
- });
217
- }
@@ -1,259 +0,0 @@
1
- 'use strict';
2
-
3
- /**
4
- * x.js
5
- * Publishes tweets to X (Twitter) via the X API v2.
6
- *
7
- * Required env vars for publishing (OAuth 1.0a user context):
8
- * X_API_KEY — Consumer/API key (required for posting)
9
- * X_API_SECRET — Consumer/API secret (required for posting)
10
- * X_ACCESS_TOKEN — User OAuth 1.0a access token (required for posting)
11
- * X_ACCESS_TOKEN_SECRET — User OAuth 1.0a access token secret (required for posting)
12
- *
13
- * Optional env vars (read-only operations only):
14
- * X_BEARER_TOKEN — App-only Bearer Token. Suitable for GET endpoints only.
15
- * Tweet creation (POST /2/tweets) requires OAuth 1.0a user
16
- * context — a Bearer Token alone is not sufficient for posting.
17
- *
18
- * X API v2 reference:
19
- * POST /2/tweets — https://developer.twitter.com/en/docs/twitter-api/tweets/manage-tweets/api-reference/post-tweets
20
- *
21
- * OAuth 1.0a reference:
22
- * https://developer.twitter.com/en/docs/authentication/oauth-1-0a
23
- */
24
-
25
- const crypto = require('crypto');
26
-
27
- const X_TWEETS_URL = 'https://api.twitter.com/2/tweets';
28
-
29
- // ---------------------------------------------------------------------------
30
- // OAuth 1.0a helpers
31
- // ---------------------------------------------------------------------------
32
-
33
- /**
34
- * Percent-encodes a string per RFC 3986 (replaces characters that
35
- * URLSearchParams does not encode, such as '!', "'", '(', ')', '*').
36
- *
37
- * @param {string} str
38
- * @returns {string}
39
- */
40
- function rfc3986Encode(str) {
41
- return encodeURIComponent(String(str)).replace(/[!'()*]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
42
- }
43
-
44
- /**
45
- * Builds an OAuth 1.0a Authorization header using HMAC-SHA1 signing.
46
- *
47
- * Steps:
48
- * 1. Collect OAuth parameters (oauth_consumer_key, oauth_nonce,
49
- * oauth_signature_method, oauth_timestamp, oauth_token, oauth_version).
50
- * 2. Merge with any extra request params (query/body), sort, percent-encode.
51
- * 3. Build the Signature Base String: METHOD&url&params.
52
- * 4. Build the signing key: consumerSecret&tokenSecret.
53
- * 5. HMAC-SHA1 sign; base64-encode the digest.
54
- * 6. Return the Authorization header value.
55
- *
56
- * @param {string} method - HTTP method in uppercase (e.g. 'POST')
57
- * @param {string} url - Base URL without query string
58
- * @param {Record<string, string>} params - Additional request parameters to include in the signature
59
- * @param {string} consumerKey - X_API_KEY
60
- * @param {string} consumerSecret - X_API_SECRET
61
- * @param {string} tokenKey - X_ACCESS_TOKEN
62
- * @param {string} tokenSecret - X_ACCESS_TOKEN_SECRET
63
- * @returns {string} Value for the Authorization HTTP header
64
- */
65
- function buildOAuth1Header(method, url, params, consumerKey, consumerSecret, tokenKey, tokenSecret) {
66
- if (!method) throw new Error('buildOAuth1Header: method is required');
67
- if (!url) throw new Error('buildOAuth1Header: url is required');
68
- if (!consumerKey) throw new Error('buildOAuth1Header: consumerKey is required');
69
- if (!consumerSecret) throw new Error('buildOAuth1Header: consumerSecret is required');
70
- if (!tokenKey) throw new Error('buildOAuth1Header: tokenKey is required');
71
- if (!tokenSecret) throw new Error('buildOAuth1Header: tokenSecret is required');
72
-
73
- const oauthNonce = crypto.randomBytes(16).toString('hex');
74
- const oauthTimestamp = String(Math.floor(Date.now() / 1000));
75
-
76
- const oauthParams = {
77
- oauth_consumer_key: consumerKey,
78
- oauth_nonce: oauthNonce,
79
- oauth_signature_method: 'HMAC-SHA1',
80
- oauth_timestamp: oauthTimestamp,
81
- oauth_token: tokenKey,
82
- oauth_version: '1.0',
83
- };
84
-
85
- // Merge oauth params with any additional request params for signature computation.
86
- const allParams = { ...params, ...oauthParams };
87
-
88
- // Sort by encoded key, then by encoded value.
89
- const sortedPairs = Object.entries(allParams)
90
- .map(([k, v]) => [rfc3986Encode(k), rfc3986Encode(v)])
91
- .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : a[1] < b[1] ? -1 : 1))
92
- .map(([k, v]) => `${k}=${v}`)
93
- .join('&');
94
-
95
- // Signature Base String: METHOD & encoded-url & encoded-params
96
- const signatureBase = [
97
- method.toUpperCase(),
98
- rfc3986Encode(url),
99
- rfc3986Encode(sortedPairs),
100
- ].join('&');
101
-
102
- // Signing key: encoded consumer secret & encoded token secret
103
- const signingKey = `${rfc3986Encode(consumerSecret)}&${rfc3986Encode(tokenSecret)}`;
104
-
105
- // HMAC-SHA1 digest, base64-encoded.
106
- const signature = crypto
107
- .createHmac('sha1', signingKey)
108
- .update(signatureBase)
109
- .digest('base64');
110
-
111
- // Build Authorization header — only include oauth_* params, not request params.
112
- const headerParams = { ...oauthParams, oauth_signature: signature };
113
- const headerValue =
114
- 'OAuth ' +
115
- Object.entries(headerParams)
116
- .map(([k, v]) => `${rfc3986Encode(k)}="${rfc3986Encode(v)}"`)
117
- .join(', ');
118
-
119
- return headerValue;
120
- }
121
-
122
- // ---------------------------------------------------------------------------
123
- // Publishing functions
124
- // ---------------------------------------------------------------------------
125
-
126
- /**
127
- * Publishes a single tweet using OAuth 1.0a user context.
128
- *
129
- * @param {string} text - Tweet text (max 280 characters)
130
- * @param {{ reply?: { in_reply_to_tweet_id: string }, media?: { media_ids: string[] } }} [options]
131
- * @returns {Promise<{ id: string, text: string }>} Created tweet object
132
- */
133
- async function publishTweet(text, options = {}) {
134
- if (!text) throw new Error('publishTweet: text is required');
135
-
136
- const consumerKey = process.env.X_API_KEY;
137
- const consumerSecret = process.env.X_API_SECRET;
138
- const accessToken = process.env.X_ACCESS_TOKEN;
139
- const accessTokenSecret = process.env.X_ACCESS_TOKEN_SECRET;
140
-
141
- if (!consumerKey) throw new Error('X_API_KEY environment variable is required for posting');
142
- if (!consumerSecret) throw new Error('X_API_SECRET environment variable is required for posting');
143
- if (!accessToken) throw new Error('X_ACCESS_TOKEN environment variable is required for posting');
144
- if (!accessTokenSecret) throw new Error('X_ACCESS_TOKEN_SECRET environment variable is required for posting');
145
-
146
- const body = { text };
147
-
148
- if (options.reply?.in_reply_to_tweet_id) {
149
- body.reply = { in_reply_to_tweet_id: options.reply.in_reply_to_tweet_id };
150
- }
151
-
152
- if (options.media?.media_ids?.length) {
153
- body.media = { media_ids: options.media.media_ids };
154
- }
155
-
156
- // OAuth 1.0a header — no extra request params for a JSON body POST.
157
- const authHeader = buildOAuth1Header(
158
- 'POST',
159
- X_TWEETS_URL,
160
- {},
161
- consumerKey,
162
- consumerSecret,
163
- accessToken,
164
- accessTokenSecret
165
- );
166
-
167
- console.log(`[x:publisher] Posting tweet: "${text.slice(0, 60)}${text.length > 60 ? '…' : ''}"`);
168
-
169
- const res = await fetch(X_TWEETS_URL, {
170
- method: 'POST',
171
- headers: {
172
- Authorization: authHeader,
173
- 'Content-Type': 'application/json',
174
- },
175
- body: JSON.stringify(body),
176
- });
177
-
178
- if (!res.ok) {
179
- const errorText = await res.text().catch(() => '');
180
- throw new Error(`X API ${res.status} for POST /2/tweets: ${errorText}`);
181
- }
182
-
183
- const json = await res.json();
184
-
185
- if (json.errors && !json.data) {
186
- throw new Error(`X API errors: ${JSON.stringify(json.errors)}`);
187
- }
188
-
189
- const tweet = json.data;
190
- console.log(`[x:publisher] Tweet published. id=${tweet.id}`);
191
- return tweet;
192
- }
193
-
194
- /**
195
- * Publishes an array of tweet texts as a thread.
196
- * Each tweet after the first replies to the previous tweet in the thread.
197
- *
198
- * @param {string[]} tweets - Array of tweet text strings in thread order
199
- * @returns {Promise<Array<{ id: string, text: string }>>} Array of created tweet objects
200
- */
201
- async function publishThread(tweets) {
202
- if (!Array.isArray(tweets) || tweets.length === 0) {
203
- throw new Error('publishThread: tweets must be a non-empty array');
204
- }
205
-
206
- console.log(`[x:publisher] Publishing thread of ${tweets.length} tweets`);
207
-
208
- const published = [];
209
- let previousTweetId = null;
210
-
211
- for (let i = 0; i < tweets.length; i++) {
212
- const text = tweets[i];
213
- const options = {};
214
-
215
- if (previousTweetId) {
216
- options.reply = { in_reply_to_tweet_id: previousTweetId };
217
- }
218
-
219
- const tweet = await publishTweet(text, options);
220
- published.push(tweet);
221
- previousTweetId = tweet.id;
222
-
223
- console.log(`[x:publisher] Thread tweet ${i + 1}/${tweets.length} published. id=${tweet.id}`);
224
- }
225
-
226
- console.log(`[x:publisher] Thread complete. ${published.length} tweets published.`);
227
- return published;
228
- }
229
-
230
- module.exports = { buildOAuth1Header, publishTweet, publishThread };
231
-
232
- // ---------------------------------------------------------------------------
233
- // Stand-alone execution
234
- // ---------------------------------------------------------------------------
235
- if (require.main === module) {
236
- const args = process.argv.slice(2);
237
-
238
- function getArg(flag) {
239
- const prefix = `${flag}=`;
240
- const entry = args.find((a) => a.startsWith(prefix));
241
- return entry ? entry.slice(prefix.length) : null;
242
- }
243
-
244
- const text = getArg('--text');
245
-
246
- if (!text) {
247
- console.error('Usage: node x.js --text=<tweet text>');
248
- process.exit(1);
249
- }
250
-
251
- publishTweet(text)
252
- .then((tweet) => {
253
- console.log(`[x:publisher] Done. id=${tweet.id} text="${tweet.text}"`);
254
- })
255
- .catch((err) => {
256
- console.error('[x:publisher] Publish failed:', err.message);
257
- process.exit(1);
258
- });
259
- }
@@ -1,223 +0,0 @@
1
- 'use strict';
2
-
3
- /**
4
- * youtube.js
5
- * Publishes YouTube Shorts via the YouTube Data API v3 resumable upload protocol.
6
- *
7
- * Required env vars:
8
- * YOUTUBE_ACCESS_TOKEN — OAuth2 bearer token with youtube.upload scope (required)
9
- *
10
- * Note: YouTube uploads require OAuth2, not just an API key.
11
- * The access token must have the scope:
12
- * https://www.googleapis.com/auth/youtube.upload
13
- *
14
- * API reference:
15
- * POST https://www.googleapis.com/upload/youtube/v3/videos?uploadType=resumable&part=snippet,status
16
- * PUT {resumableUploadUri} — upload binary chunk
17
- */
18
-
19
- const fs = require('fs');
20
- const path = require('path');
21
-
22
- const YOUTUBE_UPLOAD_BASE = 'https://www.googleapis.com/upload/youtube/v3';
23
-
24
- /**
25
- * Initiates a YouTube resumable upload session.
26
- * Returns the upload URI from the Location response header.
27
- *
28
- * @param {string} token - OAuth2 bearer token
29
- * @param {object} options - Video metadata
30
- * @param {string} options.title - Video title
31
- * @param {string} [options.description] - Video description
32
- * @param {string[]} [options.tags] - Array of tags
33
- * @param {string} [options.categoryId] - YouTube category ID (e.g. '22' = People & Blogs)
34
- * @param {string} [options.privacyStatus] - 'public' | 'private' | 'unlisted' (default: 'public')
35
- * @returns {Promise<string>} Resumable upload URI
36
- */
37
- async function initResumableUpload(token, { title, description, tags, categoryId, privacyStatus }) {
38
- if (!token) throw new Error('token is required');
39
- if (!title) throw new Error('title is required');
40
-
41
- const url =
42
- `${YOUTUBE_UPLOAD_BASE}/videos` +
43
- `?uploadType=resumable&part=snippet,status`;
44
-
45
- const body = {
46
- snippet: {
47
- title,
48
- description: description || '',
49
- tags: tags || [],
50
- categoryId: categoryId || '22',
51
- },
52
- status: {
53
- privacyStatus: privacyStatus || 'public',
54
- selfDeclaredMadeForKids: false,
55
- },
56
- };
57
-
58
- console.log(`[youtube:publisher] Initiating resumable upload: title="${title}"`);
59
-
60
- const res = await fetch(url, {
61
- method: 'POST',
62
- headers: {
63
- Authorization: `Bearer ${token}`,
64
- 'Content-Type': 'application/json; charset=UTF-8',
65
- 'X-Upload-Content-Type': 'video/*',
66
- },
67
- body: JSON.stringify(body),
68
- });
69
-
70
- if (!res.ok) {
71
- const text = await res.text().catch(() => '');
72
- throw new Error(`YouTube API ${res.status} for resumable upload init: ${text}`);
73
- }
74
-
75
- const uploadUri = res.headers.get('Location');
76
- if (!uploadUri) {
77
- throw new Error(
78
- 'YouTube resumable upload init did not return a Location header. ' +
79
- `Status: ${res.status}`
80
- );
81
- }
82
-
83
- console.log(`[youtube:publisher] Resumable upload URI obtained`);
84
- return uploadUri;
85
- }
86
-
87
- /**
88
- * Uploads the video binary to the resumable upload URI.
89
- * Uses a single PUT request (suitable for files up to ~5 GB).
90
- *
91
- * @param {string} uploadUri - Resumable upload URI from initResumableUpload
92
- * @param {Buffer} videoBuffer - Raw video file buffer
93
- * @param {string} [contentType] - MIME type (default: 'video/mp4')
94
- * @returns {Promise<object>} Created video resource from YouTube API
95
- */
96
- async function uploadVideoChunk(uploadUri, videoBuffer, contentType) {
97
- if (!uploadUri) throw new Error('uploadUri is required');
98
- if (!Buffer.isBuffer(videoBuffer)) throw new Error('videoBuffer must be a Buffer');
99
-
100
- const mimeType = contentType || 'video/mp4';
101
-
102
- console.log(
103
- `[youtube:publisher] Uploading video chunk: ` +
104
- `size=${videoBuffer.length} bytes contentType=${mimeType}`
105
- );
106
-
107
- const res = await fetch(uploadUri, {
108
- method: 'PUT',
109
- headers: {
110
- 'Content-Type': mimeType,
111
- 'Content-Length': String(videoBuffer.length),
112
- },
113
- body: videoBuffer,
114
- });
115
-
116
- if (!res.ok) {
117
- const text = await res.text().catch(() => '');
118
- throw new Error(`YouTube upload chunk failed ${res.status}: ${text}`);
119
- }
120
-
121
- const json = await res.json();
122
-
123
- if (json.error) {
124
- throw new Error(`YouTube API error after upload: ${json.error.code} — ${json.error.message}`);
125
- }
126
-
127
- const videoId = json.id;
128
- console.log(`[youtube:publisher] Video uploaded successfully. videoId=${videoId}`);
129
-
130
- return json;
131
- }
132
-
133
- /**
134
- * Orchestrates the full YouTube Shorts publish flow:
135
- * 1. Read video file from disk
136
- * 2. Ensure #Shorts is in the description
137
- * 3. Initiate resumable upload session
138
- * 4. Upload video binary
139
- *
140
- * @param {object} options
141
- * @param {string} options.videoPath - Absolute or relative path to the local video file
142
- * @param {string} options.title - Video title
143
- * @param {string} [options.description] - Video description (will have #Shorts appended if missing)
144
- * @param {string[]} [options.tags] - Array of tags
145
- * @param {string} [options.token] - OAuth2 token (falls back to YOUTUBE_ACCESS_TOKEN env var)
146
- * @param {string} [options.privacyStatus] - 'public' | 'private' | 'unlisted' (default: 'public')
147
- * @param {string} [options.categoryId] - YouTube category ID (default: '22')
148
- * @returns {Promise<{ videoId: string, url: string }>}
149
- */
150
- async function publishYouTubeShort({ videoPath, title, description, tags, token, privacyStatus, categoryId }) {
151
- const accessToken = token || process.env.YOUTUBE_ACCESS_TOKEN;
152
- if (!accessToken) {
153
- throw new Error('YOUTUBE_ACCESS_TOKEN environment variable (or token param) is required');
154
- }
155
- if (!videoPath) throw new Error('videoPath is required');
156
- if (!title) throw new Error('title is required');
157
-
158
- const resolvedPath = path.resolve(videoPath);
159
-
160
- console.log(`[youtube:publisher] Starting YouTube Shorts publish flow`);
161
- console.log(`[youtube:publisher] Reading video file: ${resolvedPath}`);
162
-
163
- const videoBuffer = fs.readFileSync(resolvedPath);
164
- console.log(`[youtube:publisher] Video file loaded: ${videoBuffer.length} bytes`);
165
-
166
- // Ensure #Shorts is present in the description for YouTube to classify as a Short.
167
- let finalDescription = description || '';
168
- if (!finalDescription.includes('#Shorts')) {
169
- finalDescription = finalDescription
170
- ? `${finalDescription}\n\n#Shorts`
171
- : '#Shorts';
172
- }
173
-
174
- const uploadUri = await initResumableUpload(accessToken, {
175
- title,
176
- description: finalDescription,
177
- tags: tags || [],
178
- categoryId: categoryId || '22',
179
- privacyStatus: privacyStatus || 'public',
180
- });
181
-
182
- const videoResource = await uploadVideoChunk(uploadUri, videoBuffer, 'video/mp4');
183
-
184
- const videoId = videoResource.id;
185
- const url = `https://youtube.com/shorts/${videoId}`;
186
-
187
- console.log(`[youtube:publisher] Short published: videoId=${videoId} url=${url}`);
188
-
189
- return { videoId, url };
190
- }
191
-
192
- module.exports = { initResumableUpload, uploadVideoChunk, publishYouTubeShort };
193
-
194
- // ---------------------------------------------------------------------------
195
- // Stand-alone execution
196
- // ---------------------------------------------------------------------------
197
- if (require.main === module) {
198
- const args = process.argv.slice(2);
199
-
200
- function getArg(flag) {
201
- const prefix = `${flag}=`;
202
- const entry = args.find((a) => a.startsWith(prefix));
203
- return entry ? entry.slice(prefix.length) : null;
204
- }
205
-
206
- const videoPath = getArg('--video');
207
- const title = getArg('--title');
208
- const description = getArg('--description');
209
-
210
- if (!videoPath || !title) {
211
- console.error('Usage: node youtube.js --video=<path> --title=<title> [--description=<desc>]');
212
- process.exit(1);
213
- }
214
-
215
- publishYouTubeShort({ videoPath, title, description: description || '' })
216
- .then(({ videoId, url }) => {
217
- console.log(`[youtube:publisher] Done. videoId=${videoId} url=${url}`);
218
- })
219
- .catch((err) => {
220
- console.error('[youtube:publisher] Publish failed:', err.message);
221
- process.exit(1);
222
- });
223
- }