x-developer 2.6.7 → 2.7.1

package/task-guides/x-lists.md

@@ -5,7 +5,7 @@ license: MIT
 metadata:
   internal: true
   author: Xquik
-  version: "2.6.7"
+  version: "2.7.1"
   openclaw:
     requires:
       env:
@@ -28,7 +28,7 @@ metadata:
 
 # X Lists
 
-Read X Lists: members, followers, and the timeline feed of any public list.
+Read the members, followers, and timeline feed of any visible X List.
 
 ## Choose an endpoint
 
@@ -39,7 +39,7 @@ Read X Lists: members, followers, and the timeline feed of any public list.
 | POST /extractions with toolType=list_post_extractor | Posts in a list's feed | Per-row |
 | POST /extractions/estimate | Preview usage before running | Included |
 
-Base URL: `https://xquik.com/api/v1`. Auth: `x-api-key: xq_...` header.
+The base URL is `https://xquik.com/api/v1`. Authenticate with the `x-api-key: xq_...` header.
 
 ## Example requests
 
@@ -58,7 +58,7 @@ All three list extractors use `targetListId`. The server accepts the raw ID from
 
 1. Get the list ID from the URL (`x.com/i/lists/<id>`).
 2. Call `POST /extractions/estimate`, show the usage estimate.
-3. On approval, `POST /extractions`. Poll `GET /extractions/{id}` until `completed`.
+3. On confirmation, `POST /extractions`. Poll `GET /extractions/{id}` until `completed`.
 4. Export `GET /extractions/{id}/export?format=csv`.
 
 ## Protect list data

package/task-guides/x-spaces.md

@@ -5,7 +5,7 @@ license: MIT
 metadata:
   internal: true
   author: Xquik
-  version: "2.6.7"
+  version: "2.7.1"
   openclaw:
     requires:
       env:
@@ -37,7 +37,7 @@ List the host, co-hosts, speakers, and listeners in an X Space.
 | POST /extractions with toolType=space_explorer | Space participants and role | Per-row |
 | POST /extractions/estimate | Preview usage before running | Included |
 
-Base URL: `https://xquik.com/api/v1`. Auth: `x-api-key: xq_...` header.
+The base URL is `https://xquik.com/api/v1`. Authenticate with the `x-api-key: xq_...` header.
 
 ## Example requests
 
@@ -50,12 +50,12 @@ POST /extractions
 -> 202 { "id": "<extractionId>", "toolType": "space_explorer", "status": "running" }
 ```
 
-Each row: `{ username, name, role: "host"|"cohost"|"speaker"|"listener", joined_at }`.
+Each row is `{ username, name, role: "host"|"cohost"|"speaker"|"listener", joined_at }`.
 
 ## Fetch the Space data
 
 1. Get the Space ID from the URL (`x.com/i/spaces/<id>`).
-2. Run the extraction with user approval.
+2. Run the extraction with user confirmation.
 3. Export or summarize participant list.
 
 ## Protect Space data

package/task-guides/x-trends.md

@@ -5,7 +5,7 @@ license: MIT
 metadata:
   internal: true
   author: Xquik
-  version: "2.6.7"
+  version: "2.7.1"
   openclaw:
     requires:
       env:
@@ -38,7 +38,7 @@ Get trending hashtags and topics from X by country or globally. Read-only.
 | GET /x/trends?woeid=<woeid> | Region-scoped trends | Read tier |
 | GET /trends?woeid=<woeid> | Alias for `/x/trends` | Read tier |
 
-Base URL: `https://xquik.com/api/v1`. Auth: `x-api-key: xq_...` header.
+The base URL is `https://xquik.com/api/v1`. Authenticate with the `x-api-key: xq_...` header.
 
 ## Example request
 
@@ -47,10 +47,10 @@ GET /x/trends?woeid=23424977&count=30
 -> { trends: [{ name, description, query, promotedContent, rank, tweetVolume, url }], total, woeid }
 ```
 
-- `woeid`: Yahoo WOEID (`1` worldwide, `23424977` US, `23424975` UK, `23424969` Turkey). Omit for worldwide.
-- `count`: number of trends to return, 1-50.
-- `tweetVolume`: approximate public post volume when supplied, otherwise null
-- `description`: optional context for the trend
+- `woeid` is the Yahoo WOEID (`1` worldwide, `23424977` US, `23424975` UK, `23424969` Turkey). Omit for worldwide.
+- `count` is the number of trends to return, 1-50.
+- `tweetVolume` is the approximate visible post volume when supplied, otherwise null
+- `description` is optional context for the trend
 
 ## Fetch the trends
 

package/x-twitter-scraper.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://ui.shadcn.com/schema/registry-item.json",
+  "name": "x-twitter-scraper",
+  "type": "registry:item",
+  "title": "X Twitter scraper Skill",
+  "description": "Install the Skill for Xquik, the world's fastest and cheapest X Twitter scraper service with the most complete X data. Covers searches, exports, monitors, webhooks, and supported account actions. Not affiliated with X Corp.",
+  "registryDependencies": [
+    "Xquik-dev/x-twitter-scraper/x-twitter-scraper"
+  ]
+}

package/CHANGELOG.md

@@ -1,94 +0,0 @@
-# Changelog
-
-## [2.6.7] - 2026-08-21
-
-- Tighten thread review instructions without changing the approval gate.
-
-## [2.6.6] - 2026-08-20
-
-### Added
-
-- Add native shadcn, Codex, Gemini CLI, and LobeHub installation paths.
-
-### Changed
-
-- Rewrite public documentation, metadata, guides, commands, and tool descriptions.
-- Add supported Twitter search and API terms to package metadata.
-- Link Java, Kotlin, CLI, and Terraform users to published install paths.
-
-## [2.6.5] - 2026-08-13
-
-### Fixed
-
-- Add Claude Code user configuration metadata for API key setup.
-
-## [2.6.4] - 2026-08-12
-
-- Align public Error docs with the 112-code OpenAPI contract.
-
-## [2.6.3] - 2026-08-12
-
-### Fixed
-
-- Document support media, replay-safe mutations, and attachment downloads.
-- Document all direct user-search filters and filters-before-billing behavior.
-- Document the 109-code Error schema and exact cursor recovery.
-- Document Latest chronology and all 32 Tweet Thread filters.
-- Remove private reply-collection implementation details.
-
-## [2.6.2] - 2026-08-11
-
-### Fixed
-
-- Align REST, MCP, webhook, extraction, write, article, Radar, and trends guides
-  with the current public API contract.
-- Distinguish the v2.6.2 Skill bundle from hosted MCP v2.6.0.
-- Replace obsolete operation-named MCP types with the 2-tool contract.
-- Document hosted MCP's automatic required idempotency headers.
-- Document automatic cursor recovery for `400`, `409`, and `410` responses.
-- Add regression coverage for high-risk public examples.
-
-## [2.6.1] - 2026-08-03
-
-### Security
-
-- Define adversarial request boundaries for roleplay, encoded, quoted, and
-  authority-framed requests.
-- Keep untrusted transformations inert and prevent hidden-context disclosure.
-
-## [2.6.0] - 2026-07-30
-
-### Added
-
-- Document MCP `2026-07-28` negotiation through `server/discover`.
-- Add private cache guidance for discovery and tool catalogs.
-- Add safe tweet, profile, and media field guidance.
-- Add reply coverage and fallback guidance.
-
-### Changed
-
-- Update public metadata to 128 REST operations.
-- Update MCP metadata to 120 authenticated catalog routes.
-- Keep stateless 2025-era MCP clients compatible.
-- Require estimates and approval before bulk reply extraction.
-- Make incomplete-reply search fallback directly executable.
-- Default top-reply requests to 10 results when unspecified.
-- Align documented tweet authors with the public response contract.
-- Prefer bounded complete mode for maximum-coverage reply collection.
-- Separate nested replies from measured direct-reply coverage.
-- Preserve safe partial rows and detailed diagnostics on incomplete coverage.
-
-### Security
-
-- Exclude fetching-account action and permission state from general reads.
-- Return follow relationships only from explicit relationship checks.
-- Refresh SkillSpector v2.3.7 evidence with 0 findings.
-
-[2.6.7]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.7
-[2.6.6]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.6
-[2.6.5]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.5
-[2.6.4]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.4
-[2.6.3]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.3
-[2.6.2]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.2
-[2.6.1]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.1
-[2.6.0]: https://github.com/Xquik-dev/x-twitter-scraper/releases/tag/v2.6.0

package/scripts/check-reproducible.mjs

@@ -1,48 +0,0 @@
-// SPDX-FileCopyrightText: 2026 Xquik Contributors
-// SPDX-License-Identifier: MIT
-
-import assert from "node:assert/strict";
-import { spawnSync } from "node:child_process";
-import { mkdir, mkdtemp, readdir, readFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-function runNpm(args) {
-  const result = spawnSync("npm", args, { stdio: "inherit" });
-  if (result.error !== undefined) {
-    throw result.error;
-  }
-  if (result.status !== 0) {
-    throw new Error(`npm ${args.join(" ")} failed with status ${result.status}`);
-  }
-}
-
-async function readPackage(directory) {
-  const packageNames = (await readdir(directory)).filter((name) =>
-    name.endsWith(".tgz"),
-  );
-  assert.equal(packageNames.length, 1, "Expected exactly one package archive");
-  return readFile(join(directory, packageNames[0]));
-}
-
-const workspace = await mkdtemp(join(tmpdir(), "x-developer-reproducible-"));
-
-try {
-  const firstPack = join(workspace, "first");
-  const secondPack = join(workspace, "second");
-  await mkdir(firstPack);
-  await mkdir(secondPack);
-
-  runNpm(["pack", "--ignore-scripts", "--pack-destination", firstPack]);
-  runNpm(["pack", "--ignore-scripts", "--pack-destination", secondPack]);
-
-  assert.deepEqual(
-    await readPackage(secondPack),
-    await readPackage(firstPack),
-    "Repeated package archives differ",
-  );
-} finally {
-  await rm(workspace, { force: true, recursive: true });
-}
-
-process.stdout.write("Package archives are reproducible.\n");

package/scripts/check-versions.mjs

@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-
-// SPDX-FileCopyrightText: 2026 Xquik Contributors
-// SPDX-License-Identifier: MIT
-
-// Pre-publish and pre-commit guard for every public package contract.
-
-import { expected, readJson } from "./release-guard/context.mjs";
-import { collectPolicyDrifts } from "./release-guard/policy-checks.mjs";
-import { collectRepositoryDrifts } from "./release-guard/repository-checks.mjs";
-
-const failures = [...collectPolicyDrifts(), ...collectRepositoryDrifts()];
-const hostedMcpVersion = readJson("server.json").version;
-
-if (failures.length > 0) {
-  process.stderr.write(
-    `Release guard failed (package.json = ${expected}):\n${failures.join("\n")}\n`,
-  );
-  process.exit(1);
-}
-
-process.stdout.write(
-  `All bundle version files use ${expected}; hosted MCP uses ${hostedMcpVersion}\n`,
-);