@happyvertical/smrt-social 0.54.2 → 0.54.4

package/dist/oauth-state.d.ts

@@ -39,6 +39,14 @@ export interface OAuthStateOptions extends SmrtObjectOptions {
      * Tenant ID for multi-tenant isolation
      */
     tenantId?: string | null;
+    /**
+     * User who started the OAuth flow
+     */
+    createdByUserId?: string | null;
+    /**
+     * Application-defined path to return to after the callback
+     */
+    returnTo?: string | null;
 }
 /**
  * Temporary OAuth state for social account connection
@@ -47,6 +55,9 @@ export interface OAuthStateOptions extends SmrtObjectOptions {
  * - Verify callback requests match initiated requests (CSRF protection)
  * - Store PKCE code verifier for code exchange
  * - Track redirect URI and scopes for verification
+ * - Bind the flow to the user who started it (`createdByUserId`) and record
+ *   where the host returns afterwards (`returnTo`), so one fixed callback
+ *   can serve every tenant
  *
  * These records should be cleaned up after successful connection
  * or after expiration.
@@ -103,6 +114,22 @@ export declare class OAuthState extends SmrtObject {
      * States should be short-lived (10 minutes typical)
      */
     expiresAt: Date;
+    /**
+     * User who started the OAuth flow.
+     *
+     * A host with one fixed callback for every tenant compares this to the
+     * signed-in user on callback and rejects a mismatch, so a forwarded or
+     * leaked state cannot be completed by someone else. A `@crossPackageRef` to
+     * `@happyvertical/smrt-users:User` (native uuid on PostgreSQL, no DDL FK).
+     * Null for states created before the column existed.
+     */
+    createdByUserId: string | null;
+    /**
+     * Application-defined path to return to after the callback, for example the
+     * settings page that started the flow. Opaque to the framework: the host
+     * that reads it must validate it as a same-origin path before redirecting.
+     */
+    returnTo: string | null;
     constructor(options?: OAuthStateOptions);
     /**
      * Check if the state has expired

package/dist/oauth-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-state.d.ts","sourceRoot":"","sources":["../src/oauth-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAQ,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D;;OAEG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;OAEG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBASa,UAAW,SAAQ,UAAU;IACxC;;OAEG;IAEH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAE/B;;OAEG;IACH,QAAQ,EAAE,kBAAkB,CAAa;IAEzC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAM;IAEnB;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEnC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAM;IAEzB;;OAEG;IACH,MAAM,EAAE,MAAM,EAAE,CAAM;IAEtB;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAyC;gBAE5C,OAAO,GAAE,iBAAsB;IAc3C;;OAEG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAI3C;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;;OAGG;IACH,MAAM,CAAC,oBAAoB,IAAI,MAAM;IAQrC;;;OAGG;WACU,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAOtE"}
+{"version":3,"file":"oauth-state.d.ts","sourceRoot":"","sources":["../src/oauth-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAmB,UAAU,EAAQ,MAAM,0BAA0B,CAAC;AAE7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D;;OAEG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;OAEG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IAEjB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBASa,UAAW,SAAQ,UAAU;IACxC;;OAEG;IAEH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAE/B;;OAEG;IACH,QAAQ,EAAE,kBAAkB,CAAa;IAEzC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAM;IAEnB;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEnC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAM;IAEzB;;OAEG;IACH,MAAM,EAAE,MAAM,EAAE,CAAM;IAEtB;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAyC;IAExD;;;;;;;;OAQG;IAEH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEtC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;gBAEnB,OAAO,GAAE,iBAAsB;IAiB3C;;OAEG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAI3C;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;;OAGG;IACH,MAAM,CAAC,oBAAoB,IAAI,MAAM;IAQrC;;;OAGG;WACU,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAOtE"}

package/dist/smrt-knowledge.json

@@ -3,13 +3,13 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-social",
-  "packageVersion": "0.54.2",
+  "packageVersion": "0.54.4",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "a28f3c03208db2fe1673dfaf167cfaabb12b09bcdf5b5eeaade2553e9299103e",
-    "packageJson": "966ccd306d822abbfd15617f6939e2980cf409beedacb479c173dc5cb4b1cff0",
-    "agents": "8649047a57ee16eb46557ab5a9504315421f6f78b434ee19ed0d4df24b45f20d"
+    "manifest": "5d2b297b125dab894da7115d298875e7b293085967791ef4a5358104a0d1d5e9",
+    "packageJson": "5f6e97155301e69b9fece15031f57273ccf4db421668b3916005910a1a28aa54",
+    "agents": "7596f706e6513fd86254f510301ec9696520655bdf19f932ec2267ca9d5767ee"
   },
   "exports": [
     ".",
@@ -64,7 +64,7 @@
     "youtube"
   ],
   "risks": [
-    "cross-package-refs:3",
+    "cross-package-refs:4",
     "sensitive-fields-excluded",
     "sti-inheritance"
   ],
@@ -134,9 +134,30 @@
           "type": "datetime",
           "required": false,
           "columnType": "TIMESTAMP"
+        },
+        {
+          "name": "createdByUserId",
+          "type": "crossPackageRef",
+          "required": false,
+          "related": "@happyvertical/smrt-users:User",
+          "columnType": "UUID"
+        },
+        {
+          "name": "returnTo",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "createdByUserId",
+          "type": "crossPackageRef",
+          "required": false,
+          "related": "@happyvertical/smrt-users:User",
+          "columnType": "UUID"
         }
       ],
-      "relationships": [],
       "methods": [
         "generateCodeChallenge",
         "generateCodeVerifier",
@@ -302,6 +323,7 @@
         }
       ],
       "relationshipFeatures": [
+        "crossPackageRef",
         "uuidColumns"
       ],
       "tags": [],
@@ -1079,11 +1101,20 @@
       "fields": [],
       "relationships": [],
       "methods": [
+        "consume",
         "deleteExpired",
         "findByState",
         "findExpired"
       ],
       "methodSignatures": [
+        {
+          "name": "consume",
+          "async": true,
+          "params": [
+            "state: OAuthState"
+          ],
+          "returns": "Promise<boolean>"
+        },
         {
           "name": "deleteExpired",
           "async": true,
@@ -1140,6 +1171,12 @@
           "operation": "findByState",
           "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
         },
+        {
+          "kind": "cli",
+          "name": "oauthstatecollection_consume",
+          "operation": "consume",
+          "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
+        },
         {
           "kind": "cli",
           "name": "oauthstatecollection_findExpired",
@@ -1153,6 +1190,15 @@
           "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
         }
       ],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "consume",
+          "code": "not-wireable",
+          "reason": "not routed: parameter `state`: `OAuthState` is a model class instance, not JSON data",
+          "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
+        }
+      ],
       "relationshipFeatures": [
         "uuidColumns"
       ],
@@ -1968,6 +2014,12 @@
       "operation": "findByState",
       "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
     },
+    {
+      "kind": "cli",
+      "name": "oauthstatecollection_consume",
+      "operation": "consume",
+      "objectName": "@happyvertical/smrt-social:OAuthStateCollection"
+    },
     {
       "kind": "cli",
       "name": "oauthstatecollection_findExpired",
@@ -2212,11 +2264,11 @@
   "prompts": [],
   "relationshipsV2": {
     "foreignKeyFields": 2,
-    "crossPackageRefFields": 3,
+    "crossPackageRefFields": 4,
     "junctionCollections": 0,
     "hierarchicalObjects": 0,
     "polymorphicAssociations": 0,
-    "uuidColumns": 26
+    "uuidColumns": 28
   },
-  "agentDoc": "# @happyvertical/smrt-social\n\nSocial media account management with OAuth and post scheduling. Supports YouTube, Threads, X (Twitter), Bluesky.\n\n## Models\n\n- **SocialAccount** (STI): `platform`, `accessToken`/`refreshToken`, `tokenExpiresAt`, `status` (connected/expired/error), `linkBehavior` (description/reply/none). `isTokenExpired` checks with 5-min buffer. `isReady` gate checks active + connected + token present + not expired.\n- **SocialPost**: `scheduledAt`, `publishedAt`, `status` (draft/scheduled/publishing/published/failed), `analytics` JSON (views/likes/comments/shares/clicks). `createdByUserId` (nullable `@crossPackageRef` to `smrt-users:User`, uuid on PostgreSQL) records the poster; pass it to `createDraft()` so a failed publish can be reported to that person. Agent/schedule posts leave it null; `recordPublishSuccess`/`Failure` never change it. Adding the column is additive: consumers run `db:migrate`.\n- **OAuthState** (STI): CSRF token + PKCE `codeVerifier` with 10-min TTL.\n\n## Gotchas\n\n- **Tokens not encrypted**: OAuth tokens stored as plaintext — TODO for smrt-secrets integration\n- **No auto-publishing**: `scheduledAt` is metadata only — app must implement job runner to trigger publishing\n- **Analytics manual**: `analytics` field must be updated by platform sync, not auto-populated\n- **Platform enum hardcoded**: youtube/threads/x/bluesky — extending requires code changes\n- **OAuthState TTL**: 10 minutes, app must clean up expired states\n- **Optional tenancy** on all models\n- **Relationship targets**: `SocialPost.socialAccountId` and\n  `SocialPostAnalyticsSnapshot.socialPostId` are same-package `@foreignKey`\n  columns; `SocialPost.videoContentId` is a `@crossPackageRef` to\n  `@happyvertical/smrt-video:VideoContent` (no value import back into this\n  package). They previously used `@foreignKey(() => X)`, whose target resolved\n  to `''`, so none of them carried a relationship edge (#2379).\n"
+  "agentDoc": "# @happyvertical/smrt-social\n\nSocial media account management with OAuth and post scheduling. Supports YouTube, Threads, X (Twitter), Bluesky.\n\n## Models\n\n- **SocialAccount** (STI): `platform`, `accessToken`/`refreshToken`, `tokenExpiresAt`, `status` (connected/expired/error), `linkBehavior` (description/reply/none). `isTokenExpired` checks with 5-min buffer. `isReady` gate checks active + connected + token present + not expired.\n- **SocialPost**: `scheduledAt`, `publishedAt`, `status` (draft/scheduled/publishing/published/failed), `analytics` JSON (views/likes/comments/shares/clicks). `createdByUserId` (nullable `@crossPackageRef` to `smrt-users:User`, uuid on PostgreSQL) records the poster; pass it to `createDraft()` so a failed publish can be reported to that person. Agent/schedule posts leave it null; `recordPublishSuccess`/`Failure` never change it. Adding the column is additive: consumers run `db:migrate`.\n- **OAuthState** (STI): CSRF token + PKCE `codeVerifier` with 10-min TTL. `createdByUserId` (nullable `@crossPackageRef` to `smrt-users:User`) binds the flow to its initiator and `returnTo` stores an opaque host path; a host with one fixed callback for every tenant must reject a different user and validate `returnTo` as same-origin. `OAuthStateCollection.consume(state)` is the single-use arbiter (revision-guarded delete; `false` when another caller already consumed it). Both columns are additive: consumers run `db:migrate`.\n\n## Gotchas\n\n- **Tokens not encrypted**: OAuth tokens stored as plaintext — TODO for smrt-secrets integration\n- **No auto-publishing**: `scheduledAt` is metadata only — app must implement job runner to trigger publishing\n- **Analytics manual**: `analytics` field must be updated by platform sync, not auto-populated\n- **Platform enum hardcoded**: youtube/threads/x/bluesky — extending requires code changes\n- **OAuthState TTL**: 10 minutes, app must clean up expired states\n- **Optional tenancy** on all models\n- **Relationship targets**: `SocialPost.socialAccountId` and\n  `SocialPostAnalyticsSnapshot.socialPostId` are same-package `@foreignKey`\n  columns; `SocialPost.videoContentId` is a `@crossPackageRef` to\n  `@happyvertical/smrt-video:VideoContent` (no value import back into this\n  package). They previously used `@foreignKey(() => X)`, whose target resolved\n  to `''`, so none of them carried a relationship edge (#2379).\n"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-social",
-  "version": "0.54.2",
+  "version": "0.54.4",
   "type": "module",
   "smrtRawPrimitives": "strict",
   "description": "Social media account management for multi-platform publishing in the SMRT ecosystem",
@@ -39,19 +39,19 @@
     "AGENTS.md"
   ],
   "dependencies": {
-    "@happyvertical/smrt-config": "0.54.2",
-    "@happyvertical/smrt-content": "0.54.2",
-    "@happyvertical/smrt-core": "0.54.2",
-    "@happyvertical/smrt-secrets": "0.54.2",
-    "@happyvertical/smrt-tenancy": "0.54.2",
-    "@happyvertical/smrt-ui": "0.54.2",
-    "@happyvertical/smrt-video": "0.54.2",
-    "@happyvertical/utils": "^0.100.3"
+    "@happyvertical/smrt-config": "0.54.4",
+    "@happyvertical/smrt-content": "0.54.4",
+    "@happyvertical/smrt-core": "0.54.4",
+    "@happyvertical/smrt-secrets": "0.54.4",
+    "@happyvertical/smrt-tenancy": "0.54.4",
+    "@happyvertical/smrt-ui": "0.54.4",
+    "@happyvertical/smrt-video": "0.54.4",
+    "@happyvertical/utils": "^0.102.1"
   },
   "devDependencies": {
-    "@happyvertical/logger": "^0.100.3",
-    "@happyvertical/smrt-vitest": "0.54.2",
-    "@happyvertical/sql": "^0.100.3",
+    "@happyvertical/logger": "^0.102.1",
+    "@happyvertical/smrt-vitest": "0.54.4",
+    "@happyvertical/sql": "^0.102.1",
     "@sveltejs/package": "^2.5.8",
     "@types/node": "24.13.6",
     "svelte": "^5.57.1",