creatorloop 0.1.0__tar.gz → 0.2.0__tar.gz

{creatorloop-0.1.0 → creatorloop-0.2.0}/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to this project are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.2.0] - 2026-10-14
+
+### Added
+- `Dockerfile` to run the server without a local Python (settings and data in a `/data` volume, `cloudflared`
+  included); CI builds the image and checks that it answers MCP `initialize` and lists the tools.
+- Setup page: `creatorloop-setup`, `creatorloop-auth login` and the new `open_setup` tool open a local page that
+  checks your Meta app, logs in with Facebook, finds your Instagram account and saves the settings — no Graph API
+  Explorer, no editing `.env`, no restart when started from Claude. English, Russian and Uzbek.
+
+### Changed
+- `.env` is written atomically and readable by its owner only.
+- Errors about missing settings or an expired token point to `open_setup` / `creatorloop-auth login`.
+
 ## [0.1.0] - 2026-10-13
 
 First public release.
@@ -22,5 +35,6 @@ First public release.
 - Three MCP prompts: weekly report, competitor brief, data-driven content ideas.
 - `examples/`: a sample carousel, a sample Reel storyboard and a Remotion Reel template with automatic checks.
 
-[Unreleased]: https://github.com/pandich93/creatorloop/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/pandich93/creatorloop/compare/v0.2.0...HEAD
+[0.2.0]: https://github.com/pandich93/creatorloop/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/pandich93/creatorloop/releases/tag/v0.1.0

{creatorloop-0.1.0 → creatorloop-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: creatorloop
-Version: 0.1.0
+Version: 0.2.0
 Summary: Open-source AI content studio for Instagram creators: Claude analyses what works, helps make Reels and carousels, schedules and reviews them via the official Instagram API
 Project-URL: Homepage, https://github.com/pandich93/creatorloop
 Project-URL: Repository, https://github.com/pandich93/creatorloop
@@ -65,22 +65,17 @@ There are plenty of "Instagram API for Claude" servers. creatorloop is built for
 
 You need [uv](https://docs.astral.sh/uv/getting-started/installation/), [Claude Desktop](https://claude.ai/download),
 an Instagram **Business or Creator** account linked to a **Facebook Page**, and your own Meta app
-([5-minute guide](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md)).
+([5-minute guide](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md#1-create-the-app)).
 
 ```bash
-uvx --from creatorloop creatorloop-setup        # 1. connect to Claude Desktop, create the settings file
+uvx --from creatorloop creatorloop-setup
 ```
 
-2. Put your app's `META_APP_ID` and `META_APP_SECRET` into the settings file the command printed.
-3. Save a 60-day token and find your account ID (the short-lived token comes from Graph API Explorer, see the guide):
+It connects Claude Desktop and opens a setup page in your browser: enter your app's **App ID** and **App Secret**,
+press **Continue with Facebook**, done. Then ask Claude: *"How did my last 10 posts do, and what should I post next?"*
 
-```bash
-uvx --from creatorloop creatorloop-auth exchange --short-token <TOKEN> --write
-uvx --from creatorloop creatorloop-auth whoami --write
-uvx --from creatorloop creatorloop-auth check   # → OK: @your_account followers=...
-```
-
-Restart Claude Desktop and ask: *"How did my last 10 posts do, and what should I post next?"*
+Already in Claude? Ask *"connect my Instagram"*: Claude opens the same page (`open_setup`). Your App Secret and
+token are typed only into that local page, never into the chat.
 
 <details>
 <summary>Installing uv</summary>
@@ -98,6 +93,47 @@ uv downloads Python 3.14 by itself if you don't have it.
 keeps your other servers, makes a backup and creates your settings file. Claude Desktop rewrites its config while it
 runs, so on macOS the command quits and reopens it for you; on Windows and Linux it asks you to quit it first.
 
+<details>
+<summary>Running in Docker instead of uv</summary>
+
+Build the image straight from GitHub and keep your settings in a folder on your computer:
+
+```bash
+docker build -t creatorloop https://github.com/pandich93/creatorloop.git
+mkdir "$HOME/creatorloop"
+```
+
+If you use the post queue, first create `.env` in that folder with `IG_TIMEZONE=Europe/Berlin` (your zone): the container
+runs in UTC.
+
+Connect your account (the setup page runs in the container; open the printed link in your browser). Keep all three
+`8765` the same; to use another port change all three:
+
+```bash
+docker run --rm -it -p 127.0.0.1:8765:8765 -v "$HOME/creatorloop:/data" --entrypoint creatorloop-auth creatorloop \
+  login --no-browser --port 8765 --bind 0.0.0.0
+```
+
+`creatorloop-setup` doesn't run inside Docker, so add the server to `claude_desktop_config.json` yourself, with the
+full path to the folder:
+
+```json
+{
+  "mcpServers": {
+    "creatorloop": {
+      "command": "docker",
+      "args": ["run", "-i", "--rm", "-v", "/Users/you/creatorloop:/data", "creatorloop"]
+    }
+  }
+}
+```
+
+Post folders for `prepare_post` and `queue_post` go into `creatorloop/content/`. The image includes `cloudflared` for
+publishing carousels.
+
+The `open_setup` tool does not work inside Docker; use the command above to reconnect.
+</details>
+
 ## What you can ask
 
 - "Make a report on my content for the last 60 days. Reels or carousels — what works better, and when should I post?"
@@ -121,9 +157,9 @@ Ready-made prompts in Claude Desktop's **+** menu: *Weekly Instagram report*, *C
 | Publishing | `prepare_post`, `get_post_job`, `publish_media`, `list_publications` |
 | Queue | `queue_post`, `list_queue`, `cancel_queued` |
 | Comments | `get_new_comments`, `reply_comment` |
-| Service | `get_api_status`, `clear_cache`, `restart_server` |
+| Service | `get_api_status`, `open_setup`, `clear_cache`, `restart_server` |
 
-33 tools in total. Tools that change something on Instagram are annotated as such for Claude, and their descriptions
+34 tools in total. Tools that change something on Instagram are annotated as such for Claude, and their descriptions
 tell it to act only after you approve: `publish_media` and `reply_comment` after you OK the preview or the exact
 text, `queue_post` only with `confirm=true` after you saw the preview.
 
@@ -187,7 +223,7 @@ Set `CREATORLOOP_HOME` to use another folder. The home folder holds `.env`, the
 | `IG_ACCESS_TOKEN` | yes | Long-lived (60 days) or System User (never expires) token — see [Meta setup](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md) |
 | `IG_USER_ID` | yes | Your Instagram professional account ID (`1784…`), not the username |
 | `GRAPH_API_VERSION` | no | Default `v26.0` |
-| `META_APP_ID`, `META_APP_SECRET` | no | Only for `creatorloop-auth exchange` |
+| `META_APP_ID`, `META_APP_SECRET` | no | Filled by the setup page; also used to check the token expiry |
 | `IG_TIMEZONE` | no | IANA name, e.g. `Europe/Berlin`. Default: your computer's timezone |
 | `QUEUE_SLOTS` | no | e.g. `Mon,Wed,Fri 20:00` |
 | `IG_DB_PATH`, `CACHE_TTL_*_MIN` | no | Database location, cache lifetime in minutes |

{creatorloop-0.1.0 → creatorloop-0.2.0}/README.md

@@ -36,22 +36,17 @@ There are plenty of "Instagram API for Claude" servers. creatorloop is built for
 
 You need [uv](https://docs.astral.sh/uv/getting-started/installation/), [Claude Desktop](https://claude.ai/download),
 an Instagram **Business or Creator** account linked to a **Facebook Page**, and your own Meta app
-([5-minute guide](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md)).
+([5-minute guide](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md#1-create-the-app)).
 
 ```bash
-uvx --from creatorloop creatorloop-setup        # 1. connect to Claude Desktop, create the settings file
+uvx --from creatorloop creatorloop-setup
 ```
 
-2. Put your app's `META_APP_ID` and `META_APP_SECRET` into the settings file the command printed.
-3. Save a 60-day token and find your account ID (the short-lived token comes from Graph API Explorer, see the guide):
+It connects Claude Desktop and opens a setup page in your browser: enter your app's **App ID** and **App Secret**,
+press **Continue with Facebook**, done. Then ask Claude: *"How did my last 10 posts do, and what should I post next?"*
 
-```bash
-uvx --from creatorloop creatorloop-auth exchange --short-token <TOKEN> --write
-uvx --from creatorloop creatorloop-auth whoami --write
-uvx --from creatorloop creatorloop-auth check   # → OK: @your_account followers=...
-```
-
-Restart Claude Desktop and ask: *"How did my last 10 posts do, and what should I post next?"*
+Already in Claude? Ask *"connect my Instagram"*: Claude opens the same page (`open_setup`). Your App Secret and
+token are typed only into that local page, never into the chat.
 
 <details>
 <summary>Installing uv</summary>
@@ -69,6 +64,47 @@ uv downloads Python 3.14 by itself if you don't have it.
 keeps your other servers, makes a backup and creates your settings file. Claude Desktop rewrites its config while it
 runs, so on macOS the command quits and reopens it for you; on Windows and Linux it asks you to quit it first.
 
+<details>
+<summary>Running in Docker instead of uv</summary>
+
+Build the image straight from GitHub and keep your settings in a folder on your computer:
+
+```bash
+docker build -t creatorloop https://github.com/pandich93/creatorloop.git
+mkdir "$HOME/creatorloop"
+```
+
+If you use the post queue, first create `.env` in that folder with `IG_TIMEZONE=Europe/Berlin` (your zone): the container
+runs in UTC.
+
+Connect your account (the setup page runs in the container; open the printed link in your browser). Keep all three
+`8765` the same; to use another port change all three:
+
+```bash
+docker run --rm -it -p 127.0.0.1:8765:8765 -v "$HOME/creatorloop:/data" --entrypoint creatorloop-auth creatorloop \
+  login --no-browser --port 8765 --bind 0.0.0.0
+```
+
+`creatorloop-setup` doesn't run inside Docker, so add the server to `claude_desktop_config.json` yourself, with the
+full path to the folder:
+
+```json
+{
+  "mcpServers": {
+    "creatorloop": {
+      "command": "docker",
+      "args": ["run", "-i", "--rm", "-v", "/Users/you/creatorloop:/data", "creatorloop"]
+    }
+  }
+}
+```
+
+Post folders for `prepare_post` and `queue_post` go into `creatorloop/content/`. The image includes `cloudflared` for
+publishing carousels.
+
+The `open_setup` tool does not work inside Docker; use the command above to reconnect.
+</details>
+
 ## What you can ask
 
 - "Make a report on my content for the last 60 days. Reels or carousels — what works better, and when should I post?"
@@ -92,9 +128,9 @@ Ready-made prompts in Claude Desktop's **+** menu: *Weekly Instagram report*, *C
 | Publishing | `prepare_post`, `get_post_job`, `publish_media`, `list_publications` |
 | Queue | `queue_post`, `list_queue`, `cancel_queued` |
 | Comments | `get_new_comments`, `reply_comment` |
-| Service | `get_api_status`, `clear_cache`, `restart_server` |
+| Service | `get_api_status`, `open_setup`, `clear_cache`, `restart_server` |
 
-33 tools in total. Tools that change something on Instagram are annotated as such for Claude, and their descriptions
+34 tools in total. Tools that change something on Instagram are annotated as such for Claude, and their descriptions
 tell it to act only after you approve: `publish_media` and `reply_comment` after you OK the preview or the exact
 text, `queue_post` only with `confirm=true` after you saw the preview.
 
@@ -158,7 +194,7 @@ Set `CREATORLOOP_HOME` to use another folder. The home folder holds `.env`, the
 | `IG_ACCESS_TOKEN` | yes | Long-lived (60 days) or System User (never expires) token — see [Meta setup](https://github.com/pandich93/creatorloop/blob/main/docs/meta-setup.md) |
 | `IG_USER_ID` | yes | Your Instagram professional account ID (`1784…`), not the username |
 | `GRAPH_API_VERSION` | no | Default `v26.0` |
-| `META_APP_ID`, `META_APP_SECRET` | no | Only for `creatorloop-auth exchange` |
+| `META_APP_ID`, `META_APP_SECRET` | no | Filled by the setup page; also used to check the token expiry |
 | `IG_TIMEZONE` | no | IANA name, e.g. `Europe/Berlin`. Default: your computer's timezone |
 | `QUEUE_SLOTS` | no | e.g. `Mon,Wed,Fri 20:00` |
 | `IG_DB_PATH`, `CACHE_TTL_*_MIN` | no | Database location, cache lifetime in minutes |

{creatorloop-0.1.0 → creatorloop-0.2.0}/README.ru.md

@@ -22,12 +22,12 @@
 
 ```bash
 uvx --from creatorloop creatorloop-setup
-uvx --from creatorloop creatorloop-auth exchange --short-token <ТОКЕН> --write
-uvx --from creatorloop creatorloop-auth whoami --write
 ```
 
-Перед второй командой впишите `META_APP_ID` и `META_APP_SECRET` в файл настроек, путь к которому покажет первая.
-Перезапустите Claude Desktop и спросите: *«Как зашли мои последние 10 постов и что мне публиковать дальше?»*
+Команда подключит Claude Desktop и откроет страницу настройки в браузере: введите **App ID** и **App Secret**
+своего приложения, нажмите **«Продолжить через Facebook»** — готово. Затем спросите Claude: *«Как зашли мои
+последние 10 постов и что мне публиковать дальше?»* Уже в Claude? Попросите *«подключи мой Instagram»* — откроется
+та же страница. Секрет и токен вводятся только на ней, не в чат.
 
 Полная документация — в [README на английском](README.md).
 

{creatorloop-0.1.0 → creatorloop-0.2.0}/README.uz.md

@@ -22,12 +22,12 @@ Kerak boʻladi: [uv](https://docs.astral.sh/uv/getting-started/installation/), C
 
 ```bash
 uvx --from creatorloop creatorloop-setup
-uvx --from creatorloop creatorloop-auth exchange --short-token <TOKEN> --write
-uvx --from creatorloop creatorloop-auth whoami --write
 ```
 
-Ikkinchi buyruqdan oldin birinchi buyruq koʻrsatgan sozlamalar fayliga `META_APP_ID` va `META_APP_SECRET` ni yozing.
-Claude Desktop'ni qayta ishga tushiring va soʻrang: *«Oxirgi 10 ta postim qanday ketdi va keyin nima joylashim kerak?»*
+Buyruq Claude Desktop'ni ulaydi va brauzerda sozlash sahifasini ochadi: ilovangizning **App ID** va **App Secret**
+qiymatlarini kiriting, **“Facebook orqali davom etish”** tugmasini bosing — tayyor. Soʻng Claude'dan soʻrang:
+*«Oxirgi 10 ta postim qanday ketdi va keyin nima joylashim kerak?»* Claude'dasizmi? *«Instagram'imni ulab ber»* deb
+soʻrang — oʻsha sahifa ochiladi. Secret va token faqat shu sahifada kiritiladi, chatga emas.
 
 Toʻliq hujjatlar — [ingliz tilidagi README](README.md)da.
 

{creatorloop-0.1.0 → creatorloop-0.2.0}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/pandich93/creatorloop",
     "source": "github"
   },
-  "version": "0.1.0",
+  "version": "0.2.0",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "creatorloop",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/__init__.py

@@ -5,7 +5,7 @@ analyse your account and competitors, make Reels and carousels, schedule them an
 Not affiliated with, endorsed or sponsored by Meta or Instagram.
 """
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
 
 DISCLAIMER = (
     "creatorloop is an independent open-source project. Not affiliated with, endorsed or sponsored by Meta or "

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/auth_cli.py

@@ -1,6 +1,7 @@
-"""Helper CLI: exchange tokens and find your Instagram professional account ID.
+"""Helper CLI: connect your Instagram account, exchange tokens and find your account ID.
 
 Usage:
+    uv run creatorloop-auth login [--no-browser] [--port N] [--bind ADDR]
     uv run creatorloop-auth exchange --short-token <TOKEN> [--write]
     uv run creatorloop-auth whoami [--write]
     uv run creatorloop-auth check
@@ -15,7 +16,7 @@ from pathlib import Path
 
 import httpx
 
-from creatorloop import DISCLAIMER, paths
+from creatorloop import DISCLAIMER, env_file, paths, setup_web
 from creatorloop.config import load_settings
 
 ENV_PATH = paths.home_dir() / ".env"
@@ -31,18 +32,40 @@ def _get(url: str, params: dict[str, str]) -> dict:
 
 
 def _write_env(key: str, value: str, path: Path = ENV_PATH) -> None:
-    path.parent.mkdir(parents=True, exist_ok=True)
-    lines = path.read_text(encoding="utf-8").splitlines() if path.exists() else []
-    for i, line in enumerate(lines):
-        if line.split("=", 1)[0].strip() == key:
-            lines[i] = f"{key}={value}"
-            break
-    else:
-        lines.append(f"{key}={value}")
-    path.write_text("\n".join(lines) + "\n", encoding="utf-8")
+    env_file.update(path, {key: value})
     print(f"  -> saved {key} to {path}")
 
 
+def cmd_login(args: argparse.Namespace) -> None:
+    s = load_settings()
+    env_path = paths.home_dir() / ".env"
+    if args.bind not in {"127.0.0.1", "localhost", "::1"}:
+        print(
+            f"Listening on {args.bind}: the page is reachable from the network. That is expected inside Docker with "
+            "-p 127.0.0.1:PORT:PORT; otherwise keep the default 127.0.0.1.",
+            file=sys.stderr,
+        )
+    try:
+        result = setup_web.run(
+            env_path,
+            open_browser=not args.no_browser,
+            port=args.port,
+            bind=args.bind,
+            api_version=s.api_version,
+            app_id=s.app_id or "",
+            app_secret=s.app_secret or "",
+        )
+    except OSError as exc:
+        sys.exit(f"Cannot start the setup page on {args.bind}:{args.port}: {exc}. Pass another --port, or check --bind.")
+    if result is None:
+        sys.exit(
+            "The setup page closed before the account was connected (stopped, or the 15-minute limit). "
+            "Run `creatorloop-auth login` again."
+        )
+    print(f"OK: @{result.username} connected, settings saved to {env_path}. "
+          f"Restart Claude Desktop if it is running.")
+
+
 def cmd_exchange(args: argparse.Namespace) -> None:
     s = load_settings()
     if not (s.app_id and s.app_secret):
@@ -108,6 +131,12 @@ def main() -> None:
     parser = argparse.ArgumentParser(prog="creatorloop-auth", description=__doc__.split("\n")[0], epilog=DISCLAIMER)
     sub = parser.add_subparsers(required=True)
 
+    p = sub.add_parser("login", help="Connect your Instagram account on a local page in the browser (recommended)")
+    p.add_argument("--no-browser", action="store_true", help="Only print the link (e.g. in Docker)")
+    p.add_argument("--port", type=int, default=0, help="Port of the setup page (default: any free port)")
+    p.add_argument("--bind", default="127.0.0.1", help="Listen address; 0.0.0.0 only inside Docker with -p 127.0.0.1:PORT:PORT")
+    p.set_defaults(func=cmd_login)
+
     p = sub.add_parser("exchange", help="Exchange short-lived user token for a long-lived (60 days) one")
     p.add_argument("--short-token", required=True)
     p.add_argument("--write", action="store_true", help="Save to .env instead of printing")

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/comments.py

@@ -1,6 +1,6 @@
 """Comments on own posts: digest of new / unanswered comments and replies (only after user approval).
 
-Needs the token permission instagram_manage_comments (README, section 3).
+Needs the token permission instagram_manage_comments (kept ticked on the setup page, see docs/meta-setup.md).
 """
 
 from __future__ import annotations
@@ -23,9 +23,8 @@ class CommentsError(RuntimeError):
 def _permission_hint(exc: GraphAPIError) -> CommentsError:
     if exc.code in PERMISSION_CODES or "permission" in exc.message.lower():
         return CommentsError(
-            "The token has no instagram_manage_comments permission. Regenerate it in Graph API Explorer with "
-            "instagram_manage_comments added, then run `uv run creatorloop-auth exchange --short-token <TOKEN> "
-            f"--write` (README, section 3). Graph API said: {exc}"
+            "The token has no instagram_manage_comments permission. Reconnect with open_setup (again=true) "
+            f"and keep instagram_manage_comments ticked. Graph API said: {exc}"
         )
     return CommentsError(f"Graph API error: {exc}")
 

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/config.py

@@ -78,8 +78,8 @@ class Settings:
         ]
         if missing:
             raise RuntimeError(
-                f"Missing required settings: {', '.join(missing)}. "
-                f"Fill them in {paths.home_dir() / '.env'} (run creatorloop-setup to create it)."
+                f"Missing required settings: {', '.join(missing)}. Connect your Instagram account: call the open_setup "
+                "tool, or run `uvx --from creatorloop creatorloop-auth login` in a terminal."
             )
 
 

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/env.example

@@ -1,19 +1,17 @@
-# creatorloop settings. `creatorloop-setup` creates this file in your creatorloop home folder;
-# fill in the two required values below and restart Claude Desktop.
-# Commands below are for a PyPI install; from a source checkout use `uv run creatorloop-auth ...`.
+# creatorloop settings. `creatorloop-setup` creates this file in your creatorloop home folder and fills
+# IG_ACCESS_TOKEN, IG_USER_ID, META_APP_ID and META_APP_SECRET through the setup page in your browser.
+# Connect again any time: `uvx --from creatorloop creatorloop-auth login` (or ask Claude to run open_setup).
 
-# Long-lived user access token (60 days) or a System User token (never expires).
-# Get it with: uvx --from creatorloop creatorloop-auth exchange --short-token <TOKEN> --write
+# Long-lived user access token (60 days) or a System User token (never expires). Filled by the setup page.
 IG_ACCESS_TOKEN=
 
-# Instagram professional account ID (NOT the username). 17841400000000000-like number.
-# Get it with: uvx --from creatorloop creatorloop-auth whoami --write
+# Instagram professional account ID (NOT the username). 17841400000000000-like number. Filled by the setup page.
 IG_USER_ID=
 
 # Graph API version. Check https://developers.facebook.com/docs/graph-api/changelog
 GRAPH_API_VERSION=v26.0
 
-# Optional: needed only for the token exchange and token expiry check.
+# Your Meta app. Filled by the setup page; also used for the token expiry check.
 META_APP_ID=
 META_APP_SECRET=
 

creatorloop-0.2.0/src/creatorloop/env_file.py

@@ -0,0 +1,35 @@
+"""Update KEY=value lines of the creatorloop .env without touching other lines or comments."""
+
+from __future__ import annotations
+
+import contextlib
+import os
+import tempfile
+from collections.abc import Mapping
+from pathlib import Path
+
+
+def update(path: Path, values: Mapping[str, str]) -> None:
+    """Set the given keys (every existing line of a key is replaced, missing keys are appended) in one atomic write.
+    The file is readable by its owner only on POSIX: it holds the App Secret and the access token."""
+    path.parent.mkdir(parents=True, exist_ok=True)
+    lines = path.read_text(encoding="utf-8-sig").splitlines() if path.exists() else []  # -sig: Notepad's BOM
+    seen: set[str] = set()
+    for i, line in enumerate(lines):
+        key = line.split("=", 1)[0].strip()
+        if "=" in line and not line.lstrip().startswith("#") and key in values:
+            lines[i] = f"{key}={values[key]}"
+            seen.add(key)
+    lines += [f"{key}={value}" for key, value in values.items() if key not in seen]
+    fd, tmp = tempfile.mkstemp(dir=path.parent, prefix=".env.", suffix=".tmp")  # mkstemp creates it with 0600
+    try:
+        with os.fdopen(fd, "w", encoding="utf-8", newline="\n") as f:
+            f.write("\n".join(lines) + "\n")
+        if hasattr(os, "geteuid") and os.geteuid() == 0:  # a root container must not turn the user's .env into root:root
+            owner = path.stat() if path.exists() else path.parent.stat()
+            with contextlib.suppress(OSError):
+                os.chown(tmp, owner.st_uid, owner.st_gid)
+        os.replace(tmp, path)
+    except BaseException:
+        Path(tmp).unlink(missing_ok=True)
+        raise

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/graph_client.py

@@ -218,7 +218,8 @@ class GraphClient:
             )
         if code == TOKEN_ERROR_CODE:
             raise TokenError(
-                f"Access token problem: {message}. Refresh IG_ACCESS_TOKEN (README, section 'Token').",
+                f"Access token problem: {message}. Reconnect the account: call open_setup with again=true "
+                "(or run `creatorloop-auth login`).",
                 **kwargs,
             )
         raise GraphAPIError(message, **kwargs)

{creatorloop-0.1.0 → creatorloop-0.2.0}/src/creatorloop/instagram.py

@@ -406,11 +406,14 @@ class InstagramService:
         }
         lefts = [d for d in (days_left, data_days_left) if d is not None]
         if not data.get("is_valid"):
-            status["warning"] = "Token is invalid. Generate a new one (README, section 'Token')."
+            status["warning"] = (
+                "Token is invalid. Reconnect: call open_setup with again=true (or run `creatorloop-auth login`)."
+            )
         elif lefts and min(lefts) <= TOKEN_WARN_DAYS:
             status["warning"] = (
                 f"Token or its data access expires in {min(lefts)} days. "
-                "Renew it or switch to a never-expiring System User token (README, section 'Token')."
+                "Renew: call open_setup with again=true, or use a never-expiring System User token "
+                "(docs/meta-setup.md, step 3)."
             )
         return status