Read-only by default
Every mutation is blocked unless you pass --allow-mutations — a structured
MUTATION_BLOCKED (exit 12), not a prompt that deadlocks a headless agent.
bird is for X. knit is for Threads — and it's actually agent-safe.knit is an agent-friendly CLI for Instagram’s Threads, built on the official API and to the
agent-CLI contract: read-only by default, mutations gated in the binary, prompt-injection-fenced,
and fully machine-readable.
Read-only by default
Every mutation is blocked unless you pass --allow-mutations — a structured
MUTATION_BLOCKED (exit 12), not a prompt that deadlocks a headless agent.
Reviewed-artifact publishing
post create --dry-run emits the exact plan + a hash; --apply <hash> publishes only that
plan. No blind --yes on an irreversible public post.
Prompt-injection-fenced
Public post / reply / search / mention text and bios are wrapped as untrusted data, never instructions — on by default in agent mode.
Machine-readable & official
knit schema dumps the command tree, exit codes, and live safety state. Built on the
official API → low breakage risk.