@happyvertical/smrt-social 0.30.0

package/dist/oauth-state.d.ts

@@ -0,0 +1,127 @@
+import { SmrtObjectOptions, SmrtObject } from '@happyvertical/smrt-core';
+import { SocialPlatformType } from './social-account.js';
+/**
+ * OAuth state creation options
+ */
+export interface OAuthStateOptions extends SmrtObjectOptions {
+    /**
+     * Platform being connected
+     */
+    platform?: SocialPlatformType;
+    /**
+     * CSRF state token
+     */
+    state?: string;
+    /**
+     * PKCE code verifier (for platforms that require it)
+     */
+    codeVerifier?: string | null;
+    /**
+     * Redirect URI used in the OAuth request
+     */
+    redirectUri?: string;
+    /**
+     * Requested OAuth scopes
+     */
+    scopes?: string[];
+    /**
+     * When this state expires
+     */
+    expiresAt?: Date;
+    /**
+     * Tenant ID for multi-tenant isolation
+     */
+    tenantId?: string | null;
+}
+/**
+ * Temporary OAuth state for social account connection
+ *
+ * OAuthState stores temporary data during the OAuth flow to:
+ * - Verify callback requests match initiated requests (CSRF protection)
+ * - Store PKCE code verifier for code exchange
+ * - Track redirect URI and scopes for verification
+ *
+ * These records should be cleaned up after successful connection
+ * or after expiration.
+ *
+ * @example
+ * ```typescript
+ * import { OAuthState } from '@happyvertical/smrt-social';
+ *
+ * // Create state when initiating OAuth
+ * const state = new OAuthState({
+ *   platform: 'youtube',
+ *   state: crypto.randomUUID(),
+ *   codeVerifier: generatePKCEVerifier(),
+ *   redirectUri: 'https://app.example.com/oauth/callback',
+ *   scopes: ['youtube.upload', 'youtube.readonly'],
+ *   expiresAt: new Date(Date.now() + 10 * 60 * 1000), // 10 minutes
+ * });
+ * await state.save();
+ *
+ * // After successful callback, delete the state
+ * await state.delete();
+ * ```
+ */
+export declare class OAuthState extends SmrtObject {
+    /**
+     * Tenant ID for multi-tenant isolation
+     */
+    tenantId: string | null;
+    /**
+     * Platform being connected
+     */
+    platform: SocialPlatformType;
+    /**
+     * CSRF state token
+     * This is sent to the OAuth provider and verified on callback
+     */
+    state: string;
+    /**
+     * PKCE code verifier
+     * Required for platforms using PKCE (YouTube, etc.)
+     */
+    codeVerifier: string | null;
+    /**
+     * Redirect URI used in the OAuth request
+     * Must match on callback for verification
+     */
+    redirectUri: string;
+    /**
+     * Requested OAuth scopes
+     */
+    scopes: string[];
+    /**
+     * When this state expires
+     * States should be short-lived (10 minutes typical)
+     */
+    expiresAt: Date;
+    constructor(options?: OAuthStateOptions);
+    /**
+     * Check if the state has expired
+     */
+    get isExpired(): boolean;
+    /**
+     * Check if the state is still valid
+     */
+    get isValid(): boolean;
+    /**
+     * Verify a callback state matches this record
+     */
+    verifyState(callbackState: string): boolean;
+    /**
+     * Generate a new random state token
+     */
+    static generateState(): string;
+    /**
+     * Generate a PKCE code verifier
+     * Returns a 43-128 character random string
+     */
+    static generateCodeVerifier(): string;
+    /**
+     * Generate PKCE code challenge from verifier (S256 method)
+     * Note: This requires async crypto operations
+     */
+    static generateCodeChallenge(verifier: string): Promise<string>;
+}
+//# sourceMappingURL=oauth-state.d.ts.map

package/dist/oauth-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state.d.ts","sourceRoot":"","sources":["../src/oauth-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAQ,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D;;OAEG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;OAEG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBASa,UAAW,SAAQ,UAAU;IACxC;;OAEG;IAEH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAE/B;;OAEG;IACH,QAAQ,EAAE,kBAAkB,CAAa;IAEzC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAM;IAEnB;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEnC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAM;IAEzB;;OAEG;IACH,MAAM,EAAE,MAAM,EAAE,CAAM;IAEtB;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAyC;gBAE5C,OAAO,GAAE,iBAAsB;IAc3C;;OAEG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAI3C;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;;OAGG;IACH,MAAM,CAAC,oBAAoB,IAAI,MAAM;IAQrC;;;OAGG;WACU,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAOtE"}

package/dist/server.d.ts

@@ -0,0 +1,18 @@
+import { LinkBehavior, PublishMode, SocialPlatformType } from './social-account.js';
+export type SocialAccountSetupMethod = 'oauth' | 'manual';
+export interface SocialPlatformSetup {
+    platform: SocialPlatformType;
+    label: string;
+    setupMethod: SocialAccountSetupMethod;
+    postTypes: Array<'text' | 'link' | 'image' | 'video'>;
+    defaultLinkBehavior: LinkBehavior;
+    defaultPublishMode: PublishMode;
+    supportedPublishModes: PublishMode[];
+    requiredSecretFields: string[];
+}
+export declare const SOCIAL_PLATFORM_SETUPS: SocialPlatformSetup[];
+export declare function getSocialPlatformSetup(platform: SocialPlatformType): SocialPlatformSetup;
+export declare function getDefaultSocialAccountName(platform: SocialPlatformType, username?: string | null): string;
+export declare function normalizeManualCredentials(platform: SocialPlatformType, values: Record<string, unknown>): Record<string, string>;
+export declare function validateManualCredentials(platform: SocialPlatformType, values: Record<string, unknown>): string[];
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,wBAAwB,CAAC;IACtC,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC;IACtD,mBAAmB,EAAE,YAAY,CAAC;IAClC,kBAAkB,EAAE,WAAW,CAAC;IAChC,qBAAqB,EAAE,WAAW,EAAE,CAAC;IACrC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,sBAAsB,EAAE,mBAAmB,EA6DvD,CAAC;AAMF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,kBAAkB,GAC3B,mBAAmB,CAMrB;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAGR;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV"}

package/dist/server.js

@@ -0,0 +1,106 @@
+const SOCIAL_PLATFORM_SETUPS = [
+  {
+    platform: "youtube",
+    label: "YouTube",
+    setupMethod: "oauth",
+    postTypes: ["video"],
+    defaultLinkBehavior: "description",
+    defaultPublishMode: "private_or_scheduled",
+    supportedPublishModes: ["dry_run", "private_or_scheduled", "public"],
+    requiredSecretFields: ["clientId", "clientSecret", "accessToken"]
+  },
+  {
+    platform: "facebook",
+    label: "Facebook Page",
+    setupMethod: "oauth",
+    postTypes: ["text", "link", "image", "video"],
+    defaultLinkBehavior: "attachment",
+    defaultPublishMode: "private_or_scheduled",
+    supportedPublishModes: [
+      "dry_run",
+      "stage_remote",
+      "private_or_scheduled",
+      "public"
+    ],
+    requiredSecretFields: ["accessToken", "pageId"]
+  },
+  {
+    platform: "threads",
+    label: "Threads",
+    setupMethod: "oauth",
+    postTypes: ["text", "link", "image", "video"],
+    defaultLinkBehavior: "attachment",
+    defaultPublishMode: "stage_remote",
+    supportedPublishModes: ["dry_run", "stage_remote", "public"],
+    requiredSecretFields: ["accessToken", "userId"]
+  },
+  {
+    platform: "x",
+    label: "X",
+    setupMethod: "oauth",
+    postTypes: ["text", "link", "image", "video"],
+    defaultLinkBehavior: "inline",
+    defaultPublishMode: "dry_run",
+    supportedPublishModes: ["dry_run", "stage_remote", "public"],
+    requiredSecretFields: [
+      "apiKey",
+      "apiSecret",
+      "accessToken",
+      "accessSecret"
+    ]
+  },
+  {
+    platform: "bluesky",
+    label: "Bluesky",
+    setupMethod: "manual",
+    postTypes: ["text", "link", "image"],
+    defaultLinkBehavior: "attachment",
+    defaultPublishMode: "dry_run",
+    supportedPublishModes: ["dry_run", "stage_remote", "public"],
+    requiredSecretFields: ["identifier", "password"]
+  }
+];
+const SOCIAL_PLATFORM_SETUP_BY_PLATFORM = new Map(
+  SOCIAL_PLATFORM_SETUPS.map((setup) => [setup.platform, setup])
+);
+function getSocialPlatformSetup(platform) {
+  const setup = SOCIAL_PLATFORM_SETUP_BY_PLATFORM.get(platform);
+  if (!setup) {
+    throw new Error(`Unsupported social platform: ${platform}`);
+  }
+  return setup;
+}
+function getDefaultSocialAccountName(platform, username) {
+  const setup = getSocialPlatformSetup(platform);
+  return username ? `${setup.label} ${username}` : setup.label;
+}
+function normalizeManualCredentials(platform, values) {
+  const setup = getSocialPlatformSetup(platform);
+  const credentials = {};
+  for (const field of setup.requiredSecretFields) {
+    const value = values[field];
+    if (typeof value === "string" && value.trim() !== "") {
+      credentials[field] = value.trim();
+    }
+  }
+  return credentials;
+}
+function validateManualCredentials(platform, values) {
+  const setup = getSocialPlatformSetup(platform);
+  const missing = [];
+  for (const field of setup.requiredSecretFields) {
+    const value = values[field];
+    if (typeof value !== "string" || value.trim() === "") {
+      missing.push(field);
+    }
+  }
+  return missing;
+}
+export {
+  SOCIAL_PLATFORM_SETUPS,
+  getDefaultSocialAccountName,
+  getSocialPlatformSetup,
+  normalizeManualCredentials,
+  validateManualCredentials
+};
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sources":["../src/server.ts"],"sourcesContent":["import type {\n  LinkBehavior,\n  PublishMode,\n  SocialPlatformType,\n} from './social-account.js';\n\nexport type SocialAccountSetupMethod = 'oauth' | 'manual';\n\nexport interface SocialPlatformSetup {\n  platform: SocialPlatformType;\n  label: string;\n  setupMethod: SocialAccountSetupMethod;\n  postTypes: Array<'text' | 'link' | 'image' | 'video'>;\n  defaultLinkBehavior: LinkBehavior;\n  defaultPublishMode: PublishMode;\n  supportedPublishModes: PublishMode[];\n  requiredSecretFields: string[];\n}\n\nexport const SOCIAL_PLATFORM_SETUPS: SocialPlatformSetup[] = [\n  {\n    platform: 'youtube',\n    label: 'YouTube',\n    setupMethod: 'oauth',\n    postTypes: ['video'],\n    defaultLinkBehavior: 'description',\n    defaultPublishMode: 'private_or_scheduled',\n    supportedPublishModes: ['dry_run', 'private_or_scheduled', 'public'],\n    requiredSecretFields: ['clientId', 'clientSecret', 'accessToken'],\n  },\n  {\n    platform: 'facebook',\n    label: 'Facebook Page',\n    setupMethod: 'oauth',\n    postTypes: ['text', 'link', 'image', 'video'],\n    defaultLinkBehavior: 'attachment',\n    defaultPublishMode: 'private_or_scheduled',\n    supportedPublishModes: [\n      'dry_run',\n      'stage_remote',\n      'private_or_scheduled',\n      'public',\n    ],\n    requiredSecretFields: ['accessToken', 'pageId'],\n  },\n  {\n    platform: 'threads',\n    label: 'Threads',\n    setupMethod: 'oauth',\n    postTypes: ['text', 'link', 'image', 'video'],\n    defaultLinkBehavior: 'attachment',\n    defaultPublishMode: 'stage_remote',\n    supportedPublishModes: ['dry_run', 'stage_remote', 'public'],\n    requiredSecretFields: ['accessToken', 'userId'],\n  },\n  {\n    platform: 'x',\n    label: 'X',\n    setupMethod: 'oauth',\n    postTypes: ['text', 'link', 'image', 'video'],\n    defaultLinkBehavior: 'inline',\n    defaultPublishMode: 'dry_run',\n    supportedPublishModes: ['dry_run', 'stage_remote', 'public'],\n    requiredSecretFields: [\n      'apiKey',\n      'apiSecret',\n      'accessToken',\n      'accessSecret',\n    ],\n  },\n  {\n    platform: 'bluesky',\n    label: 'Bluesky',\n    setupMethod: 'manual',\n    postTypes: ['text', 'link', 'image'],\n    defaultLinkBehavior: 'attachment',\n    defaultPublishMode: 'dry_run',\n    supportedPublishModes: ['dry_run', 'stage_remote', 'public'],\n    requiredSecretFields: ['identifier', 'password'],\n  },\n];\n\nconst SOCIAL_PLATFORM_SETUP_BY_PLATFORM = new Map(\n  SOCIAL_PLATFORM_SETUPS.map((setup) => [setup.platform, setup]),\n);\n\nexport function getSocialPlatformSetup(\n  platform: SocialPlatformType,\n): SocialPlatformSetup {\n  const setup = SOCIAL_PLATFORM_SETUP_BY_PLATFORM.get(platform);\n  if (!setup) {\n    throw new Error(`Unsupported social platform: ${platform}`);\n  }\n  return setup;\n}\n\nexport function getDefaultSocialAccountName(\n  platform: SocialPlatformType,\n  username?: string | null,\n): string {\n  const setup = getSocialPlatformSetup(platform);\n  return username ? `${setup.label} ${username}` : setup.label;\n}\n\nexport function normalizeManualCredentials(\n  platform: SocialPlatformType,\n  values: Record<string, unknown>,\n): Record<string, string> {\n  const setup = getSocialPlatformSetup(platform);\n  const credentials: Record<string, string> = {};\n\n  for (const field of setup.requiredSecretFields) {\n    const value = values[field];\n    if (typeof value === 'string' && value.trim() !== '') {\n      credentials[field] = value.trim();\n    }\n  }\n\n  return credentials;\n}\n\nexport function validateManualCredentials(\n  platform: SocialPlatformType,\n  values: Record<string, unknown>,\n): string[] {\n  const setup = getSocialPlatformSetup(platform);\n  const missing: string[] = [];\n\n  for (const field of setup.requiredSecretFields) {\n    const value = values[field];\n    if (typeof value !== 'string' || value.trim() === '') {\n      missing.push(field);\n    }\n  }\n\n  return missing;\n}\n"],"names":[],"mappings":"AAmBO,MAAM,yBAAgD;AAAA,EAC3D;AAAA,IACE,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,OAAO;AAAA,IACnB,qBAAqB;AAAA,IACrB,oBAAoB;AAAA,IACpB,uBAAuB,CAAC,WAAW,wBAAwB,QAAQ;AAAA,IACnE,sBAAsB,CAAC,YAAY,gBAAgB,aAAa;AAAA,EAAA;AAAA,EAElE;AAAA,IACE,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,QAAQ,QAAQ,SAAS,OAAO;AAAA,IAC5C,qBAAqB;AAAA,IACrB,oBAAoB;AAAA,IACpB,uBAAuB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,IAEF,sBAAsB,CAAC,eAAe,QAAQ;AAAA,EAAA;AAAA,EAEhD;AAAA,IACE,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,QAAQ,QAAQ,SAAS,OAAO;AAAA,IAC5C,qBAAqB;AAAA,IACrB,oBAAoB;AAAA,IACpB,uBAAuB,CAAC,WAAW,gBAAgB,QAAQ;AAAA,IAC3D,sBAAsB,CAAC,eAAe,QAAQ;AAAA,EAAA;AAAA,EAEhD;AAAA,IACE,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,QAAQ,QAAQ,SAAS,OAAO;AAAA,IAC5C,qBAAqB;AAAA,IACrB,oBAAoB;AAAA,IACpB,uBAAuB,CAAC,WAAW,gBAAgB,QAAQ;AAAA,IAC3D,sBAAsB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EACF;AAAA,EAEF;AAAA,IACE,UAAU;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,QAAQ,QAAQ,OAAO;AAAA,IACnC,qBAAqB;AAAA,IACrB,oBAAoB;AAAA,IACpB,uBAAuB,CAAC,WAAW,gBAAgB,QAAQ;AAAA,IAC3D,sBAAsB,CAAC,cAAc,UAAU;AAAA,EAAA;AAEnD;AAEA,MAAM,oCAAoC,IAAI;AAAA,EAC5C,uBAAuB,IAAI,CAAC,UAAU,CAAC,MAAM,UAAU,KAAK,CAAC;AAC/D;AAEO,SAAS,uBACd,UACqB;AACrB,QAAM,QAAQ,kCAAkC,IAAI,QAAQ;AAC5D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,gCAAgC,QAAQ,EAAE;AAAA,EAC5D;AACA,SAAO;AACT;AAEO,SAAS,4BACd,UACA,UACQ;AACR,QAAM,QAAQ,uBAAuB,QAAQ;AAC7C,SAAO,WAAW,GAAG,MAAM,KAAK,IAAI,QAAQ,KAAK,MAAM;AACzD;AAEO,SAAS,2BACd,UACA,QACwB;AACxB,QAAM,QAAQ,uBAAuB,QAAQ;AAC7C,QAAM,cAAsC,CAAA;AAE5C,aAAW,SAAS,MAAM,sBAAsB;AAC9C,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,IAAI;AACpD,kBAAY,KAAK,IAAI,MAAM,KAAA;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,0BACd,UACA,QACU;AACV,QAAM,QAAQ,uBAAuB,QAAQ;AAC7C,QAAM,UAAoB,CAAA;AAE1B,aAAW,SAAS,MAAM,sBAAsB;AAC9C,UAAM,QAAQ,OAAO,KAAK;AAC1B,QAAI,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,IAAI;AACpD,cAAQ,KAAK,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AACT;"}