unseenet-bots 0.1.0__tar.gz

unseenet_bots-0.1.0/LICENSE

@@ -0,0 +1,177 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

unseenet_bots-0.1.0/PKG-INFO

@@ -0,0 +1,117 @@
+Metadata-Version: 2.4
+Name: unseenet-bots
+Version: 0.1.0
+Summary: Bots that fill Unseenet channels with current content, built on the Unseenet core
+Author: Andreas Lorensen
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/unseenet/unseenet-bots
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: unseenet<0.5,>=0.4.1
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
+Dynamic: license-file
+
+# unseenet-bots
+
+Bots that keep [Unseenet](https://unseenet.org) channels filled with
+current content, and an example of how to build a bot on the Unseenet
+core library.
+
+**Status:** early. Six sources work, listed below.
+
+## Idea
+
+- One bot is one key, a *poster* in a channel (never the owner), with
+  `bot: true` in its profile (UN-RFC 0030 section 6).
+- One source per bot: fetch, turn into a post with a credit line
+  (author, source, licence, link), post on a schedule.
+- Built only on the public core API of
+  [unseenet/unseenet](https://github.com/unseenet/unseenet), so it
+  doubles as an example for anybody writing their own bot.
+- Readers can comment if the channel has `comments: open`
+  (UN-RFC 0030).
+
+## Running it
+
+```sh
+pip install unseenet-bots
+cp bots.example.toml bots.toml            # fill in groups and key files
+unseenet-bots -c bots.toml new-key ~/.config/unseenet-bots/news.key
+#   -> make the printed key a poster in the channel (Make poster)
+unseenet ripen --key-file ~/.config/unseenet-bots/news.key --to 0 \
+    --node NODE.onion --publish            # once: 7-11 minutes, see below
+unseenet-bots -c bots.toml run --dry-run  # see what would be posted
+unseenet-bots -c bots.toml run            # post what is new
+```
+
+**A new key ripens first** (UN-RFC 0025): nodes take posts only from keys
+that have done a few minutes of work, which is what keeps throwaway keys
+from spamming. Do it once at setup with `unseenet ripen` as above; its
+chain goes in `<key file>.state.json`, beside the key, where the runner
+finds it (it holds nothing secret). A first `run` without it would ripen
+then, and take as long. Ripening on to level 3 removes the extra postage
+a young key pays: `unseenet ripen --key-file KEY --to 3 --node NODE --publish`
+in the background, about 2.5-4 days on one core at low priority.
+
+Each `run` fetches every source once and posts what has not been posted
+before (remembered in a state file, and checked against the channel's
+newest threads). Schedule it, e.g. every hour, with the systemd units in
+`contrib/`. It starts its own Tor, or uses a running one if
+`UNSEENET_TOR_SOCKS` names its SOCKS port. Sources are fetched directly
+from the web, not over Tor.
+
+| Source | Posts | Licence |
+|---|---|---|
+| `wikipedia-news` | one post per story in Wikipedia's *In the news* | CC BY-SA 4.0 |
+| `wikipedia-onthisday` | one post a day with the day's anniversaries | CC BY-SA 4.0 |
+| `globalvoices` | whole stories from Global Voices, credited at the top | CC BY 3.0 |
+| `theconversation` | the opening paragraphs of articles from The Conversation, and a link to the rest; use `max_per_day`, as their terms do not allow republishing every article | CC BY-ND 4.0 |
+| `eff` | whole posts from EFF's Deeplinks blog | CC BY 4.0 |
+| `nasa-iotd` | NASA's Image of the Day: the caption and a link to the picture | not copyrighted |
+
+Images are left out of every post, because they often have licences of
+their own; each post links to the original. Only items from the last two
+days are posted (`max_age_hours`), so a new bot does not fill its channel
+with old news.
+
+Open the channel for comments (*Edit group* → *Readers may comment on
+posts*, UN-RFC 0030) so readers can talk about each post.
+
+## Writing a source
+
+A source is a class with a `name` and `fetch(today) -> list[Item]` in
+`src/unseenet_bots/sources/`. An `Item` has a stable `id` (so nothing is
+posted twice), a `subject` and a markdown `body` that ends with the
+credit line its licence asks for. See `wikipedia.py`, and *Writing a bot*
+in the Unseenet docs for the core API underneath.
+
+## Content and licences
+
+Only sources whose licences allow reposting are used, and each post
+credits its source as the licence asks. News agencies whose terms
+forbid redistribution are not used. The first sources are listed in
+issue #1.
+
+Whoever runs a bot is responsible for its content and for following
+the source's licence.
+
+## Versions and releases
+
+Versions follow [semantic versioning](https://semver.org/) on the same
+principles as [unseenet](https://github.com/unseenet/unseenet/blob/main/docs/development.md#versioning):
+tags `vX.Y.Z` on `main`, the changes in [CHANGELOG.md](CHANGELOG.md), and
+releases on [PyPI](https://pypi.org/p/unseenet-bots). Each release names the
+minor version of unseenet it works with (`unseenet>=0.4.1,<0.5`).
+
+To release: move the entries under `## [Unreleased]` in `CHANGELOG.md` to a
+new `## [X.Y.Z] - YYYY-MM-DD` section, set `__version__` in
+`src/unseenet_bots/__init__.py`, commit, then
+`git tag -a vX.Y.Z -m "unseenet-bots X.Y.Z" && git push origin vX.Y.Z`.
+
+## Licence
+
+The code is licensed under the Apache License 2.0. Content posted by
+the bots keeps the licence of its source.

unseenet_bots-0.1.0/README.md

@@ -0,0 +1,101 @@
+# unseenet-bots
+
+Bots that keep [Unseenet](https://unseenet.org) channels filled with
+current content, and an example of how to build a bot on the Unseenet
+core library.
+
+**Status:** early. Six sources work, listed below.
+
+## Idea
+
+- One bot is one key, a *poster* in a channel (never the owner), with
+  `bot: true` in its profile (UN-RFC 0030 section 6).
+- One source per bot: fetch, turn into a post with a credit line
+  (author, source, licence, link), post on a schedule.
+- Built only on the public core API of
+  [unseenet/unseenet](https://github.com/unseenet/unseenet), so it
+  doubles as an example for anybody writing their own bot.
+- Readers can comment if the channel has `comments: open`
+  (UN-RFC 0030).
+
+## Running it
+
+```sh
+pip install unseenet-bots
+cp bots.example.toml bots.toml            # fill in groups and key files
+unseenet-bots -c bots.toml new-key ~/.config/unseenet-bots/news.key
+#   -> make the printed key a poster in the channel (Make poster)
+unseenet ripen --key-file ~/.config/unseenet-bots/news.key --to 0 \
+    --node NODE.onion --publish            # once: 7-11 minutes, see below
+unseenet-bots -c bots.toml run --dry-run  # see what would be posted
+unseenet-bots -c bots.toml run            # post what is new
+```
+
+**A new key ripens first** (UN-RFC 0025): nodes take posts only from keys
+that have done a few minutes of work, which is what keeps throwaway keys
+from spamming. Do it once at setup with `unseenet ripen` as above; its
+chain goes in `<key file>.state.json`, beside the key, where the runner
+finds it (it holds nothing secret). A first `run` without it would ripen
+then, and take as long. Ripening on to level 3 removes the extra postage
+a young key pays: `unseenet ripen --key-file KEY --to 3 --node NODE --publish`
+in the background, about 2.5-4 days on one core at low priority.
+
+Each `run` fetches every source once and posts what has not been posted
+before (remembered in a state file, and checked against the channel's
+newest threads). Schedule it, e.g. every hour, with the systemd units in
+`contrib/`. It starts its own Tor, or uses a running one if
+`UNSEENET_TOR_SOCKS` names its SOCKS port. Sources are fetched directly
+from the web, not over Tor.
+
+| Source | Posts | Licence |
+|---|---|---|
+| `wikipedia-news` | one post per story in Wikipedia's *In the news* | CC BY-SA 4.0 |
+| `wikipedia-onthisday` | one post a day with the day's anniversaries | CC BY-SA 4.0 |
+| `globalvoices` | whole stories from Global Voices, credited at the top | CC BY 3.0 |
+| `theconversation` | the opening paragraphs of articles from The Conversation, and a link to the rest; use `max_per_day`, as their terms do not allow republishing every article | CC BY-ND 4.0 |
+| `eff` | whole posts from EFF's Deeplinks blog | CC BY 4.0 |
+| `nasa-iotd` | NASA's Image of the Day: the caption and a link to the picture | not copyrighted |
+
+Images are left out of every post, because they often have licences of
+their own; each post links to the original. Only items from the last two
+days are posted (`max_age_hours`), so a new bot does not fill its channel
+with old news.
+
+Open the channel for comments (*Edit group* → *Readers may comment on
+posts*, UN-RFC 0030) so readers can talk about each post.
+
+## Writing a source
+
+A source is a class with a `name` and `fetch(today) -> list[Item]` in
+`src/unseenet_bots/sources/`. An `Item` has a stable `id` (so nothing is
+posted twice), a `subject` and a markdown `body` that ends with the
+credit line its licence asks for. See `wikipedia.py`, and *Writing a bot*
+in the Unseenet docs for the core API underneath.
+
+## Content and licences
+
+Only sources whose licences allow reposting are used, and each post
+credits its source as the licence asks. News agencies whose terms
+forbid redistribution are not used. The first sources are listed in
+issue #1.
+
+Whoever runs a bot is responsible for its content and for following
+the source's licence.
+
+## Versions and releases
+
+Versions follow [semantic versioning](https://semver.org/) on the same
+principles as [unseenet](https://github.com/unseenet/unseenet/blob/main/docs/development.md#versioning):
+tags `vX.Y.Z` on `main`, the changes in [CHANGELOG.md](CHANGELOG.md), and
+releases on [PyPI](https://pypi.org/p/unseenet-bots). Each release names the
+minor version of unseenet it works with (`unseenet>=0.4.1,<0.5`).
+
+To release: move the entries under `## [Unreleased]` in `CHANGELOG.md` to a
+new `## [X.Y.Z] - YYYY-MM-DD` section, set `__version__` in
+`src/unseenet_bots/__init__.py`, commit, then
+`git tag -a vX.Y.Z -m "unseenet-bots X.Y.Z" && git push origin vX.Y.Z`.
+
+## Licence
+
+The code is licensed under the Apache License 2.0. Content posted by
+the bots keeps the licence of its source.

unseenet_bots-0.1.0/pyproject.toml

@@ -0,0 +1,37 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "unseenet-bots"
+dynamic = ["version"]
+description = "Bots that fill Unseenet channels with current content, built on the Unseenet core"
+readme = "README.md"
+license = "Apache-2.0"
+license-files = ["LICENSE"]
+authors = [{ name = "Andreas Lorensen" }]
+requires-python = ">=3.11"
+dependencies = [
+    # the headless posting API, unseenet.core.poster (unseenet/unseenet#166)
+    "unseenet>=0.4.1,<0.5",   # one minor version of the core at a time
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8", "pytest-asyncio>=0.23"]
+
+[project.scripts]
+unseenet-bots = "unseenet_bots.runner:main"
+
+[project.urls]
+Homepage = "https://github.com/unseenet/unseenet-bots"
+
+[tool.setuptools.dynamic]
+version = { attr = "unseenet_bots.__version__" }
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+testpaths = ["tests"]
+asyncio_mode = "auto"

unseenet_bots-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

unseenet_bots-0.1.0/src/unseenet_bots/__init__.py

@@ -0,0 +1,4 @@
+"""Bots for Unseenet channels: sources turn something on the web into posts,
+the runner posts them with the Unseenet core's headless API."""
+
+__version__ = "0.1.0"

unseenet_bots-0.1.0/src/unseenet_bots/runner.py

@@ -0,0 +1,208 @@
+"""Run bots from a config file. Each run fetches each bot's source once and
+posts what is new; schedule it with a systemd timer or cron.
+
+    unseenet-bots -c bots.toml new-key news.key   # make a key; make it a poster
+    unseenet-bots -c bots.toml run --dry-run      # show what would be posted
+    unseenet-bots -c bots.toml run                # post
+    unseenet-bots -c bots.toml run news           # only the bot named news
+"""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+import json
+import os
+import sys
+import tomllib
+from dataclasses import dataclass, field
+from datetime import datetime, timedelta, timezone
+from pathlib import Path
+
+from unseenet.core import crypto
+from unseenet.core.markup import MARKDOWN_TYPE
+from unseenet.core.poster import Poster, PosterError, load_key
+
+from .sources import Item, get_source
+
+KEEP = 1000          # remembered item IDs per bot
+
+
+@dataclass
+class Bot:
+    name: str
+    source: str
+    group: str
+    from_name: str
+    options: dict = field(default_factory=dict)
+    key_file: str | None = None
+    vault: str | None = None
+    identity: str | None = None
+    seed_env: str = "UNSEENET_SEED"
+    max_per_run: int = 5
+    max_per_day: int | None = None     # e.g. for sources that may not be republished whole
+    max_age_hours: float = 48          # never post what the source published longer ago
+    nodes: list[str] | None = None
+
+
+def load_config(path: Path) -> tuple[dict, list[Bot]]:
+    data = tomllib.loads(path.read_text())
+    defaults = data.get("defaults", {})
+    bots = []
+    for name, b in data.get("bots", {}).items():
+        if name.startswith("_"):
+            raise SystemExit(f"bot {name}: names starting with _ are reserved")
+        try:
+            bots.append(Bot(
+                name=name, source=b["source"], group=b["group"],
+                from_name=b.get("from_name", f"{name} (bot)"), options=b.get("options", {}),
+                key_file=_path(b.get("key_file")), vault=_path(b.get("vault")),
+                identity=b.get("identity"), seed_env=b.get("seed_env", "UNSEENET_SEED"),
+                max_per_run=int(b.get("max_per_run", 5)),
+                max_per_day=int(b["max_per_day"]) if "max_per_day" in b else None,
+                max_age_hours=float(b.get("max_age_hours", 48)),
+                nodes=b.get("nodes", defaults.get("nodes"))))
+        except KeyError as exc:
+            raise SystemExit(f"bot {name}: missing {exc}") from exc
+    return defaults, bots
+
+
+def _path(value: str | None) -> str | None:
+    return os.path.expanduser(value) if value else None
+
+
+class State:
+    """Which items each bot has posted: {bot: {item id: Message-ID}}."""
+
+    def __init__(self, path: Path):
+        self.path = path
+        try:
+            self.data = json.loads(path.read_text())
+        except (OSError, ValueError):
+            self.data = {}
+
+    def posted(self, bot: str) -> dict:
+        return self.data.setdefault(bot, {})
+
+    def mark(self, bot: str, item_id: str, message_id: str, now: datetime | None = None) -> None:
+        posted = self.posted(bot)
+        posted[item_id] = message_id
+        for old in list(posted)[:-KEEP]:
+            del posted[old]
+        times = self.data.setdefault("_times", {}).setdefault(bot, [])
+        times.append((now or datetime.now(timezone.utc)).isoformat())
+        del times[:-KEEP]
+
+    def posted_since(self, bot: str, since: datetime) -> int:
+        return sum(1 for t in self.data.get("_times", {}).get(bot, [])
+                   if datetime.fromisoformat(t) >= since)
+
+    def save(self) -> None:
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        tmp = self.path.with_suffix(".tmp")
+        tmp.write_text(json.dumps(self.data, indent=1))
+        tmp.replace(self.path)
+
+
+def new_items(items: list[Item], seen: dict, recent_subjects: set[str], limit: int,
+              now: datetime | None = None, max_age_hours: float | None = None) -> list[Item]:
+    """What to post now: not posted before, not too old, at most ``limit``."""
+    oldest = (now or datetime.now(timezone.utc)) - timedelta(hours=max_age_hours) \
+        if max_age_hours else None
+    out = [i for i in items if i.id not in seen and i.subject not in recent_subjects
+           and (oldest is None or i.published is None or i.published >= oldest)]
+    return out[:max(0, limit)]
+
+
+def key_state(bot: Bot) -> Path | None:
+    """Where the bot key's ripening chain is kept (UN-RFC 0025): next to its key file,
+    where ``unseenet ripen --key-file`` puts it at setup, so a key ripened there is the
+    one that posts. Holds nothing secret. Without a key file, the core's default."""
+    return Path(_path(bot.key_file) + ".state.json") if bot.key_file else None
+
+
+def _limit(bot: Bot, state: State, now: datetime) -> int:
+    if bot.max_per_day is None:
+        return bot.max_per_run
+    left = bot.max_per_day - state.posted_since(bot.name, now - timedelta(days=1))
+    return min(bot.max_per_run, left)
+
+
+async def run_bot(bot: Bot, state: State, dry_run: bool = False, today=None,
+                  poster_factory=Poster, out=print, now: datetime | None = None) -> int:
+    """Post what is new for one bot. Returns the number of posts made."""
+    now = now or datetime.now(timezone.utc)
+    today = today or now.date()
+    limit = _limit(bot, state, now)
+    if limit <= 0:
+        out(f"{bot.name}: {bot.max_per_day} posts in the last day already; waiting")
+        return 0
+    source = get_source(bot.source, **bot.options)
+    items = source.fetch(today)
+    if dry_run:
+        for item in new_items(items, state.posted(bot.name), set(), limit, now, bot.max_age_hours):
+            out(f"--- {bot.name} -> {bot.group}\nSubject: {item.subject}\n\n{item.body}")
+        return 0
+    key = load_key(key_file=bot.key_file, vault=bot.vault, identity=bot.identity,
+                   seed_env=bot.seed_env)
+    posted = 0
+    async with poster_factory(key, bot.nodes, from_name=bot.from_name, state=key_state(bot),
+                              log=lambda m: out(f"  {bot.name}: {m}")) as p:
+        recent = {subject for _, subject in await p.recent_threads(bot.group)}
+        for item in new_items(items, state.posted(bot.name), recent, limit, now, bot.max_age_hours):
+            # the sources write Markdown (Item.body); say so, or clients show it raw
+            result = await p.post(bot.group, item.subject, item.body,
+                                  content_type=MARKDOWN_TYPE)
+            if result.ok:
+                state.mark(bot.name, item.id, result.message_id, now)
+                state.save()                  # after every post: a crash posts nothing twice
+                posted += 1
+                out(f"{bot.name}: posted {item.subject!r} to {len(result.accepted)} node(s)")
+            else:
+                out(f"{bot.name}: NOT posted {item.subject!r}: {result.refused or result.unreachable}")
+    return posted
+
+
+def main(argv: list[str] | None = None) -> None:
+    p = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)
+    p.add_argument("-c", "--config", type=Path, default=Path("bots.toml"))
+    sub = p.add_subparsers(dest="cmd", required=True)
+    r = sub.add_parser("run", help="fetch and post what is new")
+    r.add_argument("bots", nargs="*", help="only these bots (default: all)")
+    r.add_argument("--dry-run", action="store_true", help="show the posts, post nothing")
+    sub.add_parser("list", help="list the configured bots")
+    k = sub.add_parser("new-key", help="make a key for a bot and show its public key")
+    k.add_argument("file", type=Path)
+    args = p.parse_args(argv)
+
+    if args.cmd == "new-key":
+        if args.file.exists():
+            sys.exit(f"{args.file} exists; not overwriting a key")
+        ident = crypto.Identity.generate()
+        args.file.touch(mode=0o600)
+        args.file.write_text(ident.seed.hex() + "\n")
+        print(f"Wrote {args.file}. Make this key a poster in the bot's channel:\n{ident.key_text}")
+        return
+
+    defaults, bots = load_config(args.config)
+    if args.cmd == "list":
+        for b in bots:
+            print(f"{b.name:16} {b.source:22} {b.group}")
+        return
+    chosen = [b for b in bots if not args.bots or b.name in args.bots]
+    if not chosen:
+        sys.exit("no such bot")
+    state = State(Path(_path(defaults.get("state_file", "~/.local/state/unseenet-bots/state.json"))))
+    failed = False
+    for bot in chosen:
+        try:
+            asyncio.run(run_bot(bot, state, dry_run=args.dry_run))
+        except (PosterError, OSError, ValueError) as exc:
+            print(f"{bot.name}: failed: {exc}", file=sys.stderr)
+            failed = True
+    if failed:
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()