X bubble #133

zhubzy · 2025-11-15T21:26:54Z

No description provided.

…support

zhubzy · 2025-11-15T21:27:36Z

Suggested PR title from Pearl

Title: feat(x-twitter): introduce X (Twitter) service integration

Body:
We're thrilled to roll out a highly anticipated integration: the new X (Twitter) service bubble! This addition significantly expands Bubble Lab's capabilities, empowering developers to build sophisticated social media automation and agentic workflows directly within our platform.

This PR delivers a robust, TypeScript-first X (Twitter) integration, enabling a suite of powerful operations:

Post Tweets: Programmatically publish new tweets, including replies, with full control over content.
Retrieve Tweets: Fetch specific tweets by ID, accessing detailed metadata like author, creation time, and public metrics.
Get User Information: Access comprehensive user profiles by username or ID, including bios, public metrics (followers, following, tweet count), and verification status.
Fetch User Tweets: Easily retrieve a user's recent tweet history, perfect for analysis or content monitoring.

Built on a Secure, Developer-First Foundation:

True to Bubble Lab's commitment to transparency and developer ownership, this integration is built with:

OAuth 2.0 with PKCE: Ensuring secure and modern authentication with X (Twitter).
End-to-End Type-Safety: Leveraging our TypeScript foundation for reliable and predictable interactions with the X API.
Code-First Workflows: All operations are exposed through a clear, auditable code interface, allowing developers to own and extend their social media logic line by line.

This integration aligns perfectly with our mission to provide an open, transparent, and developer-first platform for agentic workflows. Now, you can seamlessly connect your Bubble Lab automations to the pulse of social media, from automated content publishing to real-time data analysis. We believe this will unlock a new realm of possibilities for our community to build something truly great! 🚀

🚀 "Build in Public" Social Media Content

Google Doc Created: View Document

Suggested X Post:
Super excited to drop our new X (Twitter) integration! 🎉 Now you can craft powerful social media automations & agentic workflows right in Bubble Lab. Built with transparency, type-safety, and developer ownership in mind. What magic will you build first? 👇

#BuildInPublic #OpenSource #BubbleLab #Developers

Suggested LinkedIn Post:
Thrilled to announce a highly anticipated addition to Bubble Lab: our new X (Twitter) service integration is officially LIVE! 🚀 This is a game-changer for developers looking to build sophisticated social media automation and agentic workflows directly within our platform.

No more manual tweeting or complex external scripts! With this integration, you can now:

Programmatically Post Tweets (including replies!)
Retrieve Tweets by ID with detailed metadata
Access comprehensive User Information (bios, metrics)
Easily Fetch User Tweets for analysis or monitoring

True to our #DeveloperFirst commitment, this integration is built on a robust foundation:
✨ OAuth 2.0 with PKCE for secure authentication
✨ End-to-End Type-Safety leveraging our TypeScript core
✨ Code-First Workflows giving you full ownership and auditable logic line by line.

This isn't just a new feature; it's a statement of principles. We believe the future of agentic systems is being written in #TypeScript, and this integration perfectly aligns with our mission to provide an open, transparent, and developer-first platform. It unlocks a whole new realm of possibilities for our community to build something truly great!

What kind of innovative X (Twitter) workflows are you excited to build? Let us know in the comments! 👇

#BubbleLab #AI #Workflows #Automation #XIntegration #TwitterAPI #OpenSource #BuildInPublic #TypeScript

Copilot

Pull Request Overview

This PR adds X (Twitter) integration to the BubbleLab system, enabling users to authenticate with X OAuth 2.0 and perform operations like posting tweets, retrieving tweets, and getting user information.

Adds X Twitter OAuth 2.0 support with PKCE authentication
Implements XTwitterBubble service with four operations: post_tweet, get_tweet, get_user_info, and get_user_tweets
Updates schema definitions, credential configurations, and UI components to support X Twitter

Reviewed Changes

Copilot reviewed 10 out of 11 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
packages/bubble-shared-schemas/src/types.ts	Adds X_TWITTER_CRED credential type and 'x-twitter' bubble name
packages/bubble-shared-schemas/src/credential-schema.ts	Configures OAuth provider for X with PKCE support and default scopes
packages/bubble-core/src/bubbles/service-bubble/x-twitter.ts	Implements XTwitterBubble class with four Twitter API operations
packages/bubble-core/src/bubble-factory.ts	Registers XTwitterBubble in the factory
apps/bubblelab-api/src/services/oauth-service.ts	Adds X OAuth 2.0 client with PKCE code verifier generation and token exchange
apps/bubblelab-api/src/config/env.ts	Adds X_OAUTH_CLIENT_ID and X_OAUTH_CLIENT_SECRET environment variables
apps/bubble-studio/src/pages/CredentialsPage.tsx	Adds UI configuration for X Twitter credentials
apps/bubble-studio/src/lib/integrations.ts	Adds X Twitter logo mappings and documentation aliases

Copilot · 2025-11-15T21:29:32Z

packages/bubble-core/src/bubbles/service-bubble/x-twitter.ts

+    operation: z.literal('post_tweet').describe('Post a new tweet'),
+    success: z.boolean().describe('Whether the tweet was posted successfully'),
+    tweet: TweetSchema.optional().describe('Posted tweet metadata'),
+    error: z.string().describe('Error message if operation failed'),


The error field in all result schemas should be .optional() since it's only present when success is false. Currently it's marked as required which means successful responses must provide an empty string for error, which is redundant.

Copilot · 2025-11-15T21:29:32Z

packages/bubble-core/src/bubbles/service-bubble/x-twitter.ts

+type XTwitterResult = z.output<typeof XTwitterResultSchema>;
+type XTwitterParams = z.input<typeof XTwitterParamsSchema>;
+
+// Helper type to get the result type for a specific operation


This exported helper type lacks documentation. Add a JSDoc comment explaining its purpose for extracting operation-specific result types.

Suggested change

// Helper type to get the result type for a specific operation

/**

* Helper type to extract the result type for a specific X Twitter operation.

* Given an operation name, returns the corresponding result type from XTwitterResult.

*/

Copilot · 2025-11-15T21:29:32Z

packages/bubble-core/src/bubbles/service-bubble/x-twitter.ts

+  private async makeTwitterApiRequest(
+    endpoint: string,
+    method: 'GET' | 'POST' = 'GET',
+    body?: any
+  ): Promise<any> {


The use of any for both the body parameter and return type reduces type safety. Consider using generic types or more specific type definitions for API request/response bodies.

Copilot · 2025-11-15T21:29:33Z

apps/bubblelab-api/src/services/oauth-service.ts

+    if (provider === 'x') {
+      // Use the library's built-in PKCE code verifier generator
+      codeVerifier = await generateCodeVerifier();
+      console.log(`Generated PKCE code_verifier for X OAuth`);


Logging the PKCE code_verifier generation could expose sensitive authentication flow information in production logs. This log statement should be removed or converted to a debug-level log that's disabled in production.

Suggested change

console.log(`Generated PKCE code_verifier for X OAuth`);

Copilot · 2025-11-15T21:29:33Z

apps/bubblelab-api/src/services/oauth-service.ts

      if (!token.refreshToken) {
        console.warn(


The refresh token warning check appears to be incomplete in the diff context. Ensure this warning is properly logged for X OAuth, as refresh tokens are critical for the 'offline.access' scope.

Copilot · 2025-11-15T21:29:33Z

packages/bubble-shared-schemas/src/credential-schema.ts

+      },
+    },
+    authorizationParams: {
+      // X uses PKCE which is handled automatically by @badgateway/oauth2-client


[nitpick] While the comment explains PKCE is handled automatically, it would be helpful to note that X requires PKCE (not optional) unlike Google OAuth which doesn't use it.

Suggested change

// X uses PKCE which is handled automatically by @badgateway/oauth2-client

// X (Twitter) requires PKCE (not optional), which is handled automatically by @badgateway/oauth2-client.

// Note: Google OAuth does not use PKCE.

Copilot · 2025-11-15T21:29:33Z

packages/bubble-core/src/bubbles/service-bubble/x-twitter.ts

+    - OAuth 2.0 authentication with X (Twitter)
+    - Scoped access permissions
+    - Secure token handling
+  `;


[nitpick] The alias 'twitter' should have a comment explaining its purpose, especially since the service is branded as 'X (Twitter)' throughout the codebase.

Suggested change

`;

`;

// Alias retained as 'twitter' for backward compatibility and user familiarity,

// despite official rebranding to 'X (Twitter)' throughout the codebase.

zhubzy added 2 commits October 30, 2025 20:22

feat(x-twitter): Add X (Twitter) integration with OAuth 2.0 support

0c21c07

feat(integrations): Add X (Twitter) logo and aliases for integration …

40c385c

…support

Copilot AI review requested due to automatic review settings November 15, 2025 21:26

Copilot started reviewing on behalf of zhubzy November 15, 2025 21:27 View session

Copilot finished reviewing on behalf of zhubzy November 15, 2025 21:28

Copilot AI reviewed Nov 15, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

X bubble #133

X bubble #133

Uh oh!

zhubzy commented Nov 15, 2025

Uh oh!

zhubzy commented Nov 15, 2025

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Copilot AI Nov 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

-// Helper type to get the result type for a specific operation
+/**
+ * Helper type to extract the result type for a specific X Twitter operation.
+ * Given an operation name, returns the corresponding result type from XTwitterResult.
+ */

	// X uses PKCE which is handled automatically by @badgateway/oauth2-client
	// X (Twitter) requires PKCE (not optional), which is handled automatically by @badgateway/oauth2-client.
	// Note: Google OAuth does not use PKCE.

-  `;
+  `;
+  // Alias retained as 'twitter' for backward compatibility and user familiarity,
+  // despite official rebranding to 'X (Twitter)' throughout the codebase.

X bubble #133

Are you sure you want to change the base?

X bubble #133

Uh oh!

Conversation

zhubzy commented Nov 15, 2025

Uh oh!

zhubzy commented Nov 15, 2025

Suggested PR title from Pearl

🚀 "Build in Public" Social Media Content

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 15, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants