@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/integrations.capability.d.ts

@@ -0,0 +1 @@
+export declare const IntegrationsCapability: import("@lssm/lib.contracts-spec").CapabilitySpec;

package/dist/integrations/integrations.capability.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineCapability as t}from"@lssm/lib.contracts-spec/capabilities";import{StabilityEnum as i}from"@lssm/lib.contracts-spec/ownership";var r=t({meta:{key:"integrations",version:"1.0.0",kind:"integration",stability:i.Experimental,description:"Core integrations capability for third-party connections",owners:["@platform.core"],tags:["integrations","platform"]}});export{r as IntegrationsCapability};

package/dist/integrations/integrations.feature.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Platform Integrations feature module that bundles
+ * integration connection management capabilities.
+ */
+export declare const IntegrationsFeature: import("@lssm/lib.contracts-spec").FeatureModuleSpec;

package/dist/integrations/integrations.feature.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineFeature as e}from"@lssm/lib.contracts-spec/features";var t=e({meta:{key:"platform.integrations",version:"1.0.0",title:"Platform Integrations",description:"Manage integration connections to external providers (e.g., Stripe, Qdrant)",domain:"platform",owners:["@platform.integrations"],tags:["integrations","connections","platform"],stability:"experimental"},operations:[{key:"integrations.connection.create",version:"1.0.0"},{key:"integrations.connection.update",version:"1.0.0"},{key:"integrations.connection.delete",version:"1.0.0"},{key:"integrations.connection.list",version:"1.0.0"},{key:"integrations.connection.test",version:"1.0.0"}],events:[],presentations:[],opToPresentation:[],presentationsTargets:[],capabilities:{provides:[{key:"integrations",version:"1.0.0"}],requires:[{key:"identity",version:"1.0.0"}]}});export{t as IntegrationsFeature};

package/dist/integrations/linkedin/advertising.d.ts

@@ -0,0 +1,52 @@
+import type { LinkedInAnalyticsInput, LinkedInMetric } from './analytics.js';
+import type { LinkedInOperationRequestFor, LinkedInOperationResult } from './operations.js';
+export interface LinkedInAdAccount {
+    id: string;
+    name?: string;
+    currency: string;
+    status: string;
+}
+export interface LinkedInCampaign {
+    id: string;
+    accountId: string;
+    campaignGroupId?: string;
+    name: string;
+    status: string;
+    currency?: string;
+    maximumSpend?: number;
+}
+export interface LinkedInCampaignMutationInput {
+    action: 'create' | 'update' | 'activate' | 'pause' | 'archive';
+    campaign: Partial<LinkedInCampaign> & Pick<LinkedInCampaign, 'accountId'>;
+    budgetGuardRefId: string;
+    currency: string;
+    maximumAmount: number;
+}
+export interface LinkedInCreativeMutationInput {
+    action: 'create' | 'update' | 'archive';
+    accountId: string;
+    campaignId: string;
+    creativeId?: string;
+    contentRefId: string;
+}
+export interface LinkedInAdvertisingProvider {
+    listAdAccounts(request: LinkedInOperationRequestFor<'linkedin.ads.accounts.list', {
+        start?: number;
+        count?: number;
+    }>): Promise<LinkedInOperationResult<readonly LinkedInAdAccount[]>>;
+    listCampaigns(request: LinkedInOperationRequestFor<'linkedin.ads.campaigns.list', {
+        accountId: string;
+    }>): Promise<LinkedInOperationResult<readonly LinkedInCampaign[]>>;
+    mutateCampaign(request: LinkedInOperationRequestFor<'linkedin.ads.campaigns.mutate', LinkedInCampaignMutationInput>): Promise<LinkedInOperationResult<LinkedInCampaign>>;
+    mutateCreative(request: LinkedInOperationRequestFor<'linkedin.ads.creatives.mutate', LinkedInCreativeMutationInput>): Promise<LinkedInOperationResult<{
+        creativeId: string;
+        status: string;
+    }>>;
+    readAudienceCount(request: LinkedInOperationRequestFor<'linkedin.ads.audiences.count', {
+        accountId: string;
+        targeting: Readonly<Record<string, unknown>>;
+    }>): Promise<LinkedInOperationResult<{
+        count: number;
+    }>>;
+    readReporting(request: LinkedInOperationRequestFor<'linkedin.ads.reporting.read', LinkedInAnalyticsInput>): Promise<LinkedInOperationResult<readonly LinkedInMetric[]>>;
+}

package/dist/integrations/linkedin/advertising.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/linkedin/analytics.d.ts

@@ -0,0 +1,25 @@
+import type { LinkedInUrn } from './models.js';
+import type { LinkedInOperationRequestFor, LinkedInOperationResult } from './operations.js';
+export interface LinkedInMetric {
+    name: string;
+    value: number;
+    unit?: string;
+    startAt: string;
+    endAt: string;
+    pivot?: string;
+    attribution?: string;
+    sourceRevision?: string;
+}
+export interface LinkedInAnalyticsInput {
+    subjectUrn?: LinkedInUrn;
+    adAccountId?: string;
+    metricNames: readonly string[];
+    startAt: string;
+    endAt: string;
+    pivot?: string;
+}
+export interface LinkedInAnalyticsProvider {
+    readCommunityAnalytics(request: LinkedInOperationRequestFor<'linkedin.analytics.community.read', LinkedInAnalyticsInput>): Promise<LinkedInOperationResult<readonly LinkedInMetric[]>>;
+    readSalesAnalytics(request: LinkedInOperationRequestFor<'linkedin.analytics.sales.read', LinkedInAnalyticsInput>): Promise<LinkedInOperationResult<readonly LinkedInMetric[]>>;
+    readAdvertisingAnalytics(request: LinkedInOperationRequestFor<'linkedin.analytics.ads.read', LinkedInAnalyticsInput>): Promise<LinkedInOperationResult<readonly LinkedInMetric[]>>;
+}

package/dist/integrations/linkedin/analytics.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/linkedin/capabilities.d.ts

@@ -0,0 +1,54 @@
+import type { LinkedInInstallation } from './installation.js';
+import type { LinkedInActorType, LinkedInProduct, LinkedInResourceRef } from './models.js';
+export declare const LINKEDIN_CAPABILITY_IDS: readonly ['linkedin.content.media.upload', 'linkedin.content.media.read', 'linkedin.identity.member.read', 'linkedin.identity.organization.read', 'linkedin.network.connections.read', 'linkedin.network.invitations.read', 'linkedin.network.invitations.write', 'linkedin.content.posts.draft', 'linkedin.content.posts.read', 'linkedin.content.posts.publish', 'linkedin.content.posts.manage', 'linkedin.community.comments.read', 'linkedin.community.comments.write', 'linkedin.community.reactions.read', 'linkedin.community.reactions.write', 'linkedin.messaging.threads.read', 'linkedin.messaging.messages.read', 'linkedin.messaging.messages.write', 'linkedin.sales.leads.search', 'linkedin.sales.accounts.search', 'linkedin.sales.crm-sync', 'linkedin.sales.profile-association', 'linkedin.sales.employment-validation', 'linkedin.analytics.community.read', 'linkedin.analytics.sales.read', 'linkedin.analytics.ads.read', 'linkedin.webhooks.subscriptions.manage', 'linkedin.webhooks.events.read', 'linkedin.leads.sync', 'linkedin.ads.accounts.read', 'linkedin.ads.campaigns.read', 'linkedin.ads.campaigns.write', 'linkedin.ads.creatives.write', 'linkedin.ads.audiences.read', 'linkedin.ads.reporting.read'];
+export type LinkedInCapabilityId = (typeof LINKEDIN_CAPABILITY_IDS)[number];
+export type LinkedInCapabilityAccessState = 'available' | 'approval_required' | 'scope_missing' | 'role_missing' | 'disabled' | 'unavailable';
+export type LinkedInEffectClass = 'read' | 'draft' | 'write' | 'spend';
+export type LinkedInCertificationState = 'contract_modeled' | 'adapter_fixture_certified' | 'safe_provider_test_certified' | 'operationally_certified';
+export interface LinkedInCapabilityRequirement {
+    product: LinkedInProduct;
+    scopes: readonly string[];
+    actorTypes: readonly LinkedInActorType[];
+    requiredRoles?: readonly string[];
+    effect: LinkedInEffectClass;
+    docsUrl: string;
+}
+export interface LinkedInCapabilityDecision {
+    capability: LinkedInCapabilityId;
+    state: LinkedInCapabilityAccessState;
+    reason: string;
+    requirement: LinkedInCapabilityRequirement;
+    providerApiVersion: string;
+    evaluatedAt: string;
+    actorType?: LinkedInActorType;
+    resource?: LinkedInResourceRef;
+    remediation?: string;
+    evidenceRefIds: readonly string[];
+}
+export interface LinkedInCertificationEvidence {
+    state: LinkedInCertificationState;
+    product: LinkedInProduct;
+    capability: LinkedInCapabilityId;
+    operationKey: string;
+    effect: LinkedInEffectClass;
+    actorType: LinkedInActorType;
+    resourceId?: string;
+    providerApiVersion: string;
+    schemaFingerprint: string;
+    certifiedAt: string;
+    evidenceRefIds: readonly string[];
+}
+export declare function isLinkedInCapabilityAvailable(decision: LinkedInCapabilityDecision | undefined): boolean;
+export declare function certificationCovers(evidence: LinkedInCertificationEvidence, request: Pick<LinkedInCertificationEvidence, 'capability' | 'operationKey' | 'effect'>): boolean;
+interface LinkedInCapabilityEvaluationInput {
+    capability: LinkedInCapabilityId;
+    requirement: LinkedInCapabilityRequirement;
+    installation: LinkedInInstallation;
+    connectionId: string;
+    actorType: LinkedInActorType;
+    providerApiVersion: string;
+    evaluatedAt: string;
+    resource?: LinkedInResourceRef;
+}
+export declare function evaluateLinkedInCapabilityAccess(input: LinkedInCapabilityEvaluationInput): LinkedInCapabilityDecision;
+export {};

package/dist/integrations/linkedin/capabilities.js

@@ -0,0 +1,2 @@
+// @bun
+var c=["linkedin.content.media.upload","linkedin.content.media.read","linkedin.identity.member.read","linkedin.identity.organization.read","linkedin.network.connections.read","linkedin.network.invitations.read","linkedin.network.invitations.write","linkedin.content.posts.draft","linkedin.content.posts.read","linkedin.content.posts.publish","linkedin.content.posts.manage","linkedin.community.comments.read","linkedin.community.comments.write","linkedin.community.reactions.read","linkedin.community.reactions.write","linkedin.messaging.threads.read","linkedin.messaging.messages.read","linkedin.messaging.messages.write","linkedin.sales.leads.search","linkedin.sales.accounts.search","linkedin.sales.crm-sync","linkedin.sales.profile-association","linkedin.sales.employment-validation","linkedin.analytics.community.read","linkedin.analytics.sales.read","linkedin.analytics.ads.read","linkedin.webhooks.subscriptions.manage","linkedin.webhooks.events.read","linkedin.leads.sync","linkedin.ads.accounts.read","linkedin.ads.campaigns.read","linkedin.ads.campaigns.write","linkedin.ads.creatives.write","linkedin.ads.audiences.read","linkedin.ads.reporting.read"];function l(e){return e?.state==="available"}function p(e,i){return e.capability===i.capability&&e.operationKey===i.operationKey&&e.effect===i.effect}function k(e){if(!e.requirement.actorTypes.includes(e.actorType))return a(e,"unavailable",[]);let i=e.installation.approvals.find((n)=>n.product===e.requirement.product);if(i?.state!=="approved")return a(e,"approval_required",[...i?.evidenceRefIds??[]]);let r=e.installation.children.find((n)=>n.connectionId===e.connectionId&&n.product===e.requirement.product);if(!r?.enabled)return a(e,"disabled",i.evidenceRefIds);if(!e.installation.grants.filter((n)=>n.id===r.grantId&&n.subject.type===e.actorType&&n.revokedAt===void 0).find((n)=>e.requirement.scopes.every((s)=>n.scopes.includes(s))))return a(e,"scope_missing",i.evidenceRefIds);let o=e.resource?e.installation.roles[e.resource.id]??[]:[];if(e.requirement.requiredRoles?.length&&!e.resource)return a(e,"role_missing",i.evidenceRefIds);if(e.resource&&e.requirement.requiredRoles?.length&&!e.requirement.requiredRoles.some((n)=>o.includes(n)))return a(e,"role_missing",i.evidenceRefIds);return a(e,"available",i.evidenceRefIds)}function a(e,i,r){let t={available:"Required product, grant, scopes, actor, role, and connection are available.",approval_required:"LinkedIn product approval is absent or not active.",scope_missing:"No active actor grant contains every required scope.",role_missing:"The actor lacks a required role on the target resource.",disabled:"The matching LinkedIn product connection is disabled or absent.",unavailable:"The provider does not expose this capability."};return{capability:e.capability,state:i,reason:t[i],requirement:e.requirement,providerApiVersion:e.providerApiVersion,evaluatedAt:e.evaluatedAt,actorType:e.actorType,resource:e.resource,remediation:i==="available"?void 0:"Review LinkedIn product approval, scopes, actor roles, and connection state.",evidenceRefIds:r}}export{c as LINKEDIN_CAPABILITY_IDS,p as certificationCovers,k as evaluateLinkedInCapabilityAccess,l as isLinkedInCapabilityAvailable};

package/dist/integrations/linkedin/capability-evaluation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/linkedin/community.d.ts

@@ -0,0 +1,77 @@
+import type { LinkedInRecordEvidence, LinkedInUrn } from './models.js';
+import type { LinkedInOperationRequestFor, LinkedInOperationResult } from './operations.js';
+export type LinkedInPostLifecycleAction = 'publish' | 'update' | 'delete' | 'reshare';
+export interface LinkedInPost {
+    urn: LinkedInUrn;
+    authorUrn: LinkedInUrn;
+    commentary?: string;
+    lifecycleState: string;
+    publishedAt?: string;
+    evidence: LinkedInRecordEvidence;
+}
+export interface LinkedInPublishPostInput {
+    draftId: string;
+    authorUrn: LinkedInUrn;
+    action: LinkedInPostLifecycleAction;
+    visibility?: string;
+}
+export interface LinkedInCommunityActionInput {
+    targetUrn: LinkedInUrn;
+    action: 'create' | 'update' | 'delete' | 'moderate';
+    text?: string;
+    reactionType?: string;
+}
+export interface LinkedInPostDraftRef {
+    draftId: string;
+    authorUrn: LinkedInUrn;
+    contentType: 'text' | 'image' | 'video' | 'document' | 'article' | 'multi-image' | 'reshare' | 'sponsored-compatible';
+}
+export interface LinkedInPostValidation {
+    valid: boolean;
+    warnings: readonly string[];
+}
+export interface LinkedInCommunityProvider {
+    draftPost(request: LinkedInOperationRequestFor<'linkedin.content.posts.draft', LinkedInPostDraftRef>): Promise<LinkedInOperationResult<LinkedInPostDraftRef>>;
+    validatePost(request: LinkedInOperationRequestFor<'linkedin.content.posts.validate', LinkedInPostDraftRef>): Promise<LinkedInOperationResult<LinkedInPostValidation>>;
+    readPost(request: LinkedInOperationRequestFor<'linkedin.content.posts.get', {
+        postUrn: LinkedInUrn;
+    }>): Promise<LinkedInOperationResult<LinkedInPost>>;
+    publishPost(request: LinkedInOperationRequestFor<'linkedin.content.posts.publish', LinkedInPublishPostInput>): Promise<LinkedInOperationResult<LinkedInPost>>;
+    updatePost(request: LinkedInOperationRequestFor<'linkedin.content.posts.update', LinkedInPublishPostInput>): Promise<LinkedInOperationResult<LinkedInPost>>;
+    deletePost(request: LinkedInOperationRequestFor<'linkedin.content.posts.delete', {
+        postUrn: LinkedInUrn;
+    }>): Promise<LinkedInOperationResult<{
+        deleted: true;
+    }>>;
+    resharePost(request: LinkedInOperationRequestFor<'linkedin.content.posts.reshare', LinkedInPublishPostInput>): Promise<LinkedInOperationResult<LinkedInPost>>;
+    listComments(request: LinkedInOperationRequestFor<'linkedin.community.comments.list', {
+        targetUrn: LinkedInUrn;
+    }>): Promise<LinkedInOperationResult<readonly LinkedInCommunityItem[]>>;
+    createComment(request: LinkedInOperationRequestFor<'linkedin.community.comments.create', LinkedInCommunityActionInput>): Promise<LinkedInOperationResult<LinkedInCommunityItem>>;
+    replyToComment(request: LinkedInOperationRequestFor<'linkedin.community.comments.reply', LinkedInCommunityActionInput & {
+        parentCommentUrn: LinkedInUrn;
+    }>): Promise<LinkedInOperationResult<LinkedInCommunityItem>>;
+    updateComment(request: LinkedInOperationRequestFor<'linkedin.community.comments.update', LinkedInCommunityActionInput>): Promise<LinkedInOperationResult<LinkedInCommunityItem>>;
+    deleteComment(request: LinkedInOperationRequestFor<'linkedin.community.comments.delete', LinkedInCommunityActionInput>): Promise<LinkedInOperationResult<{
+        deleted: true;
+    }>>;
+    moderateComment(request: LinkedInOperationRequestFor<'linkedin.community.comments.moderate', LinkedInCommunityActionInput & {
+        moderationAction: 'hide' | 'unhide' | 'report';
+    }>): Promise<LinkedInOperationResult<LinkedInCommunityItem>>;
+    listReactions(request: LinkedInOperationRequestFor<'linkedin.community.reactions.list', {
+        targetUrn: LinkedInUrn;
+    }>): Promise<LinkedInOperationResult<readonly LinkedInCommunityItem[]>>;
+    createReaction(request: LinkedInOperationRequestFor<'linkedin.community.reactions.create', LinkedInCommunityActionInput>): Promise<LinkedInOperationResult<LinkedInCommunityItem>>;
+    deleteReaction(request: LinkedInOperationRequestFor<'linkedin.community.reactions.delete', LinkedInCommunityActionInput>): Promise<LinkedInOperationResult<{
+        deleted: true;
+    }>>;
+}
+export interface LinkedInCommunityItem {
+    urn: LinkedInUrn;
+    targetUrn: LinkedInUrn;
+    actorUrn: LinkedInUrn;
+    kind: 'comment' | 'reply' | 'reaction';
+    text?: string;
+    reactionType?: string;
+    evidence: LinkedInRecordEvidence;
+}

package/dist/integrations/linkedin/community.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/linkedin/credentials.d.ts

@@ -0,0 +1,17 @@
+import type { IntegrationCredentialReference } from '../credentials.js';
+export interface LinkedInCredentialReference extends IntegrationCredentialReference {
+    kind: 'linkedin-oauth-grant';
+    providerKey: 'linkedin';
+    installationId: string;
+    grantId: string;
+    tokenVersion: number;
+}
+export interface LinkedInLegacyCredentialMigration {
+    connectionId: string;
+    destination: LinkedInCredentialReference;
+    startedAt: string;
+    completedAt?: string;
+    auditReceiptId?: string;
+    status: 'pending' | 'completed' | 'failed';
+}
+export declare function redactLinkedInCredentialReference(reference: LinkedInCredentialReference): Readonly<LinkedInCredentialReference>;

package/dist/integrations/linkedin/credentials.js

@@ -0,0 +1,2 @@
+// @bun
+function n(e){return Object.freeze({kind:e.kind,providerKey:e.providerKey,secretProvider:e.secretProvider,secretRef:e.secretRef,version:e.version,installationId:e.installationId,grantId:e.grantId,tokenVersion:e.tokenVersion,updatedAt:e.updatedAt})}export{n as redactLinkedInCredentialReference};

package/dist/integrations/linkedin/host.d.ts

@@ -0,0 +1,53 @@
+import type { LinkedInCredentialReference } from './credentials.js';
+import type { LinkedInWebhookEvent } from './webhooks.js';
+export interface LinkedInHostRequestConstraints {
+    maxBodyBytes: number;
+    replayWindowMs: number;
+    receivedAt: string;
+    providerTimestamp?: string;
+}
+export interface LinkedInOAuthCallbackRequest {
+    callbackUrl: string;
+    code: string;
+    state: string;
+    rawQuery: string;
+    tenantHint?: string;
+    constraints: Pick<LinkedInHostRequestConstraints, 'receivedAt'>;
+}
+export interface LinkedInOAuthCallbackResult {
+    installationId: string;
+    grantId: string;
+    connectionIds: readonly string[];
+    credential: LinkedInCredentialReference;
+    auditReceiptId: string;
+}
+export interface LinkedInOAuthCallbackHandler {
+    handleCallback(request: LinkedInOAuthCallbackRequest): Promise<LinkedInOAuthCallbackResult>;
+}
+export interface LinkedInWebhookTenantBinding {
+    subscriptionId: string;
+    tenantId: string;
+    workspaceId: string;
+    installationId: string;
+    grantId: string;
+    connectionId: string;
+    resourceId?: string;
+}
+export interface LinkedInWebhookHostRequest {
+    callbackUrl: string;
+    headers: Readonly<Record<string, string>>;
+    rawBody: Uint8Array;
+    constraints: LinkedInHostRequestConstraints;
+    binding: LinkedInWebhookTenantBinding;
+}
+export interface LinkedInWebhookHostResult {
+    status: 'accepted' | 'duplicate' | 'rejected' | 'backfill_required';
+    event?: LinkedInWebhookEvent;
+    checkpointId?: string;
+    backfillFrom?: string;
+    auditReceiptId: string;
+}
+export interface LinkedInWebhookHandler {
+    handleWebhook(request: LinkedInWebhookHostRequest): Promise<LinkedInWebhookHostResult>;
+}
+export declare function assertLinkedInWebhookHostRequest(request: LinkedInWebhookHostRequest): void;

package/dist/integrations/linkedin/host.js

@@ -0,0 +1,2 @@
+// @bun
+function r(e){if(e.rawBody.byteLength>e.constraints.maxBodyBytes||e.constraints.maxBodyBytes<1||e.constraints.replayWindowMs<1)throw Error("LinkedIn webhook request violates body or replay limits");if(e.constraints.providerTimestamp){let t=Date.parse(e.constraints.receivedAt),i=Date.parse(e.constraints.providerTimestamp);if(!Number.isFinite(t)||!Number.isFinite(i)||Math.abs(t-i)>e.constraints.replayWindowMs)throw Error("LinkedIn webhook request is outside the replay window")}let n=e.binding;if([n.subscriptionId,n.tenantId,n.workspaceId,n.installationId,n.grantId,n.connectionId].some((t)=>t.trim().length===0))throw Error("LinkedIn webhook requires complete tenant binding")}export{r as assertLinkedInWebhookHostRequest};

package/dist/integrations/linkedin/host.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/linkedin/identity.d.ts

@@ -0,0 +1,29 @@
+import type { LinkedInOrganization, LinkedInPage, LinkedInProfessionalProfile, LinkedInUrn } from './models.js';
+import type { LinkedInOperationRequestFor, LinkedInOperationResult } from './operations.js';
+export interface LinkedInGetMemberInput {
+    memberUrn?: LinkedInUrn;
+}
+export interface LinkedInListOrganizationsInput {
+    role?: string;
+    start?: number;
+    count?: number;
+}
+export interface LinkedInListConnectionsInput {
+    start?: number;
+    count?: number;
+}
+export interface LinkedInConnectionRecord {
+    member: LinkedInProfessionalProfile;
+    connectedAt?: string;
+}
+export interface LinkedInIdentityProvider {
+    getMember(request: LinkedInOperationRequestFor<'linkedin.identity.member.get', LinkedInGetMemberInput>): Promise<LinkedInOperationResult<LinkedInProfessionalProfile>>;
+    listOrganizations(request: LinkedInOperationRequestFor<'linkedin.identity.organizations.list', LinkedInListOrganizationsInput>): Promise<LinkedInOperationResult<{
+        items: readonly LinkedInOrganization[];
+        page: LinkedInPage;
+    }>>;
+    listConnections(request: LinkedInOperationRequestFor<'linkedin.network.connections.list', LinkedInListConnectionsInput>): Promise<LinkedInOperationResult<{
+        items: readonly LinkedInConnectionRecord[];
+        page: LinkedInPage;
+    }>>;
+}

package/dist/integrations/linkedin/identity.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/linkedin/index.d.ts

@@ -0,0 +1,16 @@
+export * from './advertising.js';
+export * from './analytics.js';
+export * from './capabilities.js';
+export * from './community.js';
+export * from './credentials.js';
+export * from './host.js';
+export * from './identity.js';
+export * from './installation.js';
+export * from './messaging.js';
+export * from './models.js';
+export * from './operation-catalog.js';
+export * from './operations.js';
+export * from './provider.js';
+export * from './sales.js';
+export * from './sync.js';
+export * from './webhooks.js';

package/dist/integrations/linkedin/index.js

@@ -0,0 +1,2 @@
+// @bun
+var u=["linkedin.content.media.upload","linkedin.content.media.read","linkedin.identity.member.read","linkedin.identity.organization.read","linkedin.network.connections.read","linkedin.network.invitations.read","linkedin.network.invitations.write","linkedin.content.posts.draft","linkedin.content.posts.read","linkedin.content.posts.publish","linkedin.content.posts.manage","linkedin.community.comments.read","linkedin.community.comments.write","linkedin.community.reactions.read","linkedin.community.reactions.write","linkedin.messaging.threads.read","linkedin.messaging.messages.read","linkedin.messaging.messages.write","linkedin.sales.leads.search","linkedin.sales.accounts.search","linkedin.sales.crm-sync","linkedin.sales.profile-association","linkedin.sales.employment-validation","linkedin.analytics.community.read","linkedin.analytics.sales.read","linkedin.analytics.ads.read","linkedin.webhooks.subscriptions.manage","linkedin.webhooks.events.read","linkedin.leads.sync","linkedin.ads.accounts.read","linkedin.ads.campaigns.read","linkedin.ads.campaigns.write","linkedin.ads.creatives.write","linkedin.ads.audiences.read","linkedin.ads.reporting.read"];function y(e){return e?.state==="available"}function L(e,n){return e.capability===n.capability&&e.operationKey===n.operationKey&&e.effect===n.effect}function g(e){if(!e.requirement.actorTypes.includes(e.actorType))return a(e,"unavailable",[]);let n=e.installation.approvals.find((o)=>o.product===e.requirement.product);if(n?.state!=="approved")return a(e,"approval_required",[...n?.evidenceRefIds??[]]);let r=e.installation.children.find((o)=>o.connectionId===e.connectionId&&o.product===e.requirement.product);if(!r?.enabled)return a(e,"disabled",n.evidenceRefIds);if(!e.installation.grants.filter((o)=>o.id===r.grantId&&o.subject.type===e.actorType&&o.revokedAt===void 0).find((o)=>e.requirement.scopes.every((p)=>o.scopes.includes(p))))return a(e,"scope_missing",n.evidenceRefIds);let k=e.resource?e.installation.roles[e.resource.id]??[]:[];if(e.requirement.requiredRoles?.length&&!e.resource)return a(e,"role_missing",n.evidenceRefIds);if(e.resource&&e.requirement.requiredRoles?.length&&!e.requirement.requiredRoles.some((o)=>k.includes(o)))return a(e,"role_missing",n.evidenceRefIds);return a(e,"available",n.evidenceRefIds)}function a(e,n,r){let s={available:"Required product, grant, scopes, actor, role, and connection are available.",approval_required:"LinkedIn product approval is absent or not active.",scope_missing:"No active actor grant contains every required scope.",role_missing:"The actor lacks a required role on the target resource.",disabled:"The matching LinkedIn product connection is disabled or absent.",unavailable:"The provider does not expose this capability."};return{capability:e.capability,state:n,reason:s[n],requirement:e.requirement,providerApiVersion:e.providerApiVersion,evaluatedAt:e.evaluatedAt,actorType:e.actorType,resource:e.resource,remediation:n==="available"?void 0:"Review LinkedIn product approval, scopes, actor roles, and connection state.",evidenceRefIds:r}}function v(e){return Object.freeze({kind:e.kind,providerKey:e.providerKey,secretProvider:e.secretProvider,secretRef:e.secretRef,version:e.version,installationId:e.installationId,grantId:e.grantId,tokenVersion:e.tokenVersion,updatedAt:e.updatedAt})}function b(e){if(e.rawBody.byteLength>e.constraints.maxBodyBytes||e.constraints.maxBodyBytes<1||e.constraints.replayWindowMs<1)throw Error("LinkedIn webhook request violates body or replay limits");if(e.constraints.providerTimestamp){let r=Date.parse(e.constraints.receivedAt),s=Date.parse(e.constraints.providerTimestamp);if(!Number.isFinite(r)||!Number.isFinite(s)||Math.abs(r-s)>e.constraints.replayWindowMs)throw Error("LinkedIn webhook request is outside the replay window")}let n=e.binding;if([n.subscriptionId,n.tenantId,n.workspaceId,n.installationId,n.grantId,n.connectionId].some((r)=>r.trim().length===0))throw Error("LinkedIn webhook requires complete tenant binding")}function P(e){for(let n of e.grants)if(n.installationId!==e.id||n.tenantId!==e.tenantId||n.workspaceId!==e.workspaceId)throw Error("LinkedIn grant crosses its installation boundary")}function m(e,n,r,s,l){return{key:e,kind:n,transport:r,capability:s,effect:l}}var i=(e,n,r="rest")=>({key:e,kind:"query",transport:r,capability:n,effect:"read"}),t=(e,n,r="write",s="rest")=>({key:e,kind:"command",transport:s,capability:n,effect:r}),c=[t("linkedin.content.media.initialize","linkedin.content.media.upload"),t("linkedin.content.media.transfer","linkedin.content.media.upload"),t("linkedin.content.media.finalize","linkedin.content.media.upload"),i("linkedin.content.media.get","linkedin.content.media.read"),i("linkedin.identity.member.get","linkedin.identity.member.read"),i("linkedin.identity.profiles.sync","linkedin.identity.member.read"),i("linkedin.identity.organizations.list","linkedin.identity.organization.read"),i("linkedin.identity.organizations.sync","linkedin.identity.organization.read"),i("linkedin.network.connections.list","linkedin.network.connections.read"),i("linkedin.network.connections.sync","linkedin.network.connections.read"),i("linkedin.network.invitations.list","linkedin.network.invitations.read"),t("linkedin.network.invitations.send","linkedin.network.invitations.write"),t("linkedin.network.invitations.respond","linkedin.network.invitations.write"),t("linkedin.content.posts.draft","linkedin.content.posts.draft","draft","local"),t("linkedin.content.posts.validate","linkedin.content.posts.draft","draft","local"),i("linkedin.content.posts.get","linkedin.content.posts.read"),t("linkedin.content.posts.publish","linkedin.content.posts.publish"),t("linkedin.content.posts.update","linkedin.content.posts.manage"),t("linkedin.content.posts.delete","linkedin.content.posts.manage"),t("linkedin.content.posts.reshare","linkedin.content.posts.publish"),i("linkedin.community.comments.list","linkedin.community.comments.read"),t("linkedin.community.comments.create","linkedin.community.comments.write"),t("linkedin.community.comments.reply","linkedin.community.comments.write"),t("linkedin.community.comments.update","linkedin.community.comments.write"),t("linkedin.community.comments.delete","linkedin.community.comments.write"),t("linkedin.community.comments.moderate","linkedin.community.comments.write"),i("linkedin.community.reactions.list","linkedin.community.reactions.read"),t("linkedin.community.reactions.create","linkedin.community.reactions.write"),t("linkedin.community.reactions.delete","linkedin.community.reactions.write"),i("linkedin.messaging.conversations.list","linkedin.messaging.threads.read"),i("linkedin.messaging.messages.list","linkedin.messaging.messages.read"),t("linkedin.messaging.messages.send","linkedin.messaging.messages.write"),t("linkedin.messaging.messages.reply","linkedin.messaging.messages.write"),i("linkedin.sales.leads.search","linkedin.sales.leads.search"),i("linkedin.sales.accounts.search","linkedin.sales.accounts.search"),t("linkedin.sales.crm.sync","linkedin.sales.crm-sync"),t("linkedin.sales.profiles.associate","linkedin.sales.profile-association"),i("linkedin.sales.employment.validate","linkedin.sales.employment-validation"),i("linkedin.analytics.community.read","linkedin.analytics.community.read"),i("linkedin.analytics.sales.read","linkedin.analytics.sales.read"),i("linkedin.analytics.ads.read","linkedin.analytics.ads.read"),t("linkedin.webhooks.subscriptions.manage","linkedin.webhooks.subscriptions.manage"),i("linkedin.webhooks.challenge.validate","linkedin.webhooks.events.read","webhook"),m("linkedin.webhooks.events.normalize","event","webhook","linkedin.webhooks.events.read","read"),i("linkedin.leads.responses.sync","linkedin.leads.sync"),i("linkedin.sync.backfill","linkedin.leads.sync"),i("linkedin.ads.accounts.list","linkedin.ads.accounts.read"),i("linkedin.ads.campaigns.list","linkedin.ads.campaigns.read"),t("linkedin.ads.campaigns.mutate","linkedin.ads.campaigns.write","spend"),t("linkedin.ads.creatives.mutate","linkedin.ads.creatives.write"),i("linkedin.ads.audiences.count","linkedin.ads.audiences.read"),i("linkedin.ads.reporting.read","linkedin.ads.reporting.read")];var q=["linkedin.content.media.initialize","linkedin.content.media.transfer","linkedin.content.media.finalize","linkedin.content.media.get","linkedin.identity.member.get","linkedin.identity.profiles.sync","linkedin.identity.organizations.list","linkedin.identity.organizations.sync","linkedin.network.connections.list","linkedin.network.connections.sync","linkedin.network.invitations.list","linkedin.network.invitations.send","linkedin.network.invitations.respond","linkedin.content.posts.draft","linkedin.content.posts.validate","linkedin.content.posts.get","linkedin.content.posts.publish","linkedin.content.posts.update","linkedin.content.posts.delete","linkedin.content.posts.reshare","linkedin.community.comments.list","linkedin.community.comments.create","linkedin.community.comments.reply","linkedin.community.comments.update","linkedin.community.comments.delete","linkedin.community.comments.moderate","linkedin.community.reactions.list","linkedin.community.reactions.create","linkedin.community.reactions.delete","linkedin.messaging.conversations.list","linkedin.messaging.messages.list","linkedin.messaging.messages.send","linkedin.messaging.messages.reply","linkedin.sales.leads.search","linkedin.sales.accounts.search","linkedin.sales.crm.sync","linkedin.sales.profiles.associate","linkedin.sales.employment.validate","linkedin.analytics.community.read","linkedin.analytics.sales.read","linkedin.analytics.ads.read","linkedin.webhooks.subscriptions.manage","linkedin.webhooks.challenge.validate","linkedin.webhooks.events.normalize","linkedin.leads.responses.sync","linkedin.sync.backfill","linkedin.ads.accounts.list","linkedin.ads.campaigns.list","linkedin.ads.campaigns.mutate","linkedin.ads.creatives.mutate","linkedin.ads.audiences.count","linkedin.ads.reporting.read"];class d extends Error{code;retryable;providerStatus;capability;constructor(e){super(e.message);this.name="LinkedInProviderError",this.code=e.code,this.retryable=e.retryable??!1,this.providerStatus=e.providerStatus,this.capability=e.capability}}function A(e){let n=c.find((r)=>r.key===e.operationKey);if(!n||n.effect!==e.effect||n.capability!==e.context.capability)throw new d({code:"invalid_input",message:"LinkedIn operation key, effect, and capability must match stable operation metadata"});if((e.effect==="write"||e.effect==="spend")&&(!e.context.idempotencyKey||!e.context.authorityEvaluationRefId||!e.context.approvalRefId))throw new d({code:"invalid_input",message:"LinkedIn writes require idempotency, authority, and approval references"});if(e.effect==="spend"&&(!I(e.input)||typeof e.input.budgetGuardRefId!=="string"||typeof e.input.currency!=="string"||typeof e.input.maximumAmount!=="number"||e.input.maximumAmount<=0))throw new d({code:"invalid_input",message:"LinkedIn spend requires a budget guard, currency, and positive maximum amount"})}function I(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}var T={"linkedin.content.media.initialize":"initializeMedia","linkedin.content.media.transfer":"transferMedia","linkedin.content.media.finalize":"finalizeMedia","linkedin.content.media.get":"readMedia","linkedin.identity.member.get":"getMember","linkedin.identity.profiles.sync":"syncProfiles","linkedin.identity.organizations.list":"listOrganizations","linkedin.identity.organizations.sync":"syncOrganizations","linkedin.network.connections.list":"listConnections","linkedin.network.connections.sync":"syncConnections","linkedin.network.invitations.list":"listInvitations","linkedin.network.invitations.send":"sendInvitation","linkedin.network.invitations.respond":"respondToInvitation","linkedin.content.posts.draft":"draftPost","linkedin.content.posts.validate":"validatePost","linkedin.content.posts.get":"readPost","linkedin.content.posts.publish":"publishPost","linkedin.content.posts.update":"updatePost","linkedin.content.posts.delete":"deletePost","linkedin.content.posts.reshare":"resharePost","linkedin.community.comments.list":"listComments","linkedin.community.comments.create":"createComment","linkedin.community.comments.reply":"replyToComment","linkedin.community.comments.update":"updateComment","linkedin.community.comments.delete":"deleteComment","linkedin.community.comments.moderate":"moderateComment","linkedin.community.reactions.list":"listReactions","linkedin.community.reactions.create":"createReaction","linkedin.community.reactions.delete":"deleteReaction","linkedin.messaging.conversations.list":"listConversations","linkedin.messaging.messages.list":"listMessages","linkedin.messaging.messages.send":"sendMessage","linkedin.messaging.messages.reply":"replyToMessage","linkedin.sales.leads.search":"searchLeads","linkedin.sales.accounts.search":"searchAccounts","linkedin.sales.crm.sync":"syncCrm","linkedin.sales.profiles.associate":"associateProfile","linkedin.sales.employment.validate":"validateEmployment","linkedin.analytics.community.read":"readCommunityAnalytics","linkedin.analytics.sales.read":"readSalesAnalytics","linkedin.analytics.ads.read":"readAdvertisingAnalytics","linkedin.webhooks.subscriptions.manage":"manageSubscription","linkedin.webhooks.challenge.validate":"validateChallenge","linkedin.webhooks.events.normalize":"normalizeEvent","linkedin.leads.responses.sync":"syncLeadResponses","linkedin.sync.backfill":"backfill","linkedin.ads.accounts.list":"listAdAccounts","linkedin.ads.campaigns.list":"listCampaigns","linkedin.ads.campaigns.mutate":"mutateCampaign","linkedin.ads.creatives.mutate":"mutateCreative","linkedin.ads.audiences.count":"readAudienceCount","linkedin.ads.reporting.read":"readReporting"};export{u as LINKEDIN_CAPABILITY_IDS,c as LINKEDIN_OPERATION_CONTRACTS,q as LINKEDIN_OPERATION_KEYS,T as LINKEDIN_OPERATION_PORT_METHODS,d as LinkedInProviderError,P as assertLinkedInInstallationBoundary,b as assertLinkedInWebhookHostRequest,A as assertLinkedInWriteAuthority,L as certificationCovers,g as evaluateLinkedInCapabilityAccess,y as isLinkedInCapabilityAvailable,v as redactLinkedInCredentialReference};

package/dist/integrations/linkedin/installation.d.ts

@@ -0,0 +1,54 @@
+import type { IntegrationOwnershipMode } from '../spec.js';
+import type { LinkedInCapabilityDecision, LinkedInCertificationEvidence } from './capabilities.js';
+import type { LinkedInCredentialReference } from './credentials.js';
+import type { LinkedInActorRef, LinkedInProduct, LinkedInResourceRef } from './models.js';
+export interface LinkedInProductApproval {
+    product: LinkedInProduct;
+    state: 'approved' | 'pending' | 'not-requested' | 'rejected' | 'expired';
+    agreementRefId?: string;
+    approvedAt?: string;
+    expiresAt?: string;
+    evidenceRefIds: readonly string[];
+}
+export interface LinkedInGrant {
+    id: string;
+    installationId: string;
+    tenantId: string;
+    workspaceId: string;
+    subject: LinkedInActorRef;
+    authFlow: 'authorization_code' | 'client_credentials';
+    scopes: readonly string[];
+    issuedAt: string;
+    expiresAt?: string;
+    consentedAt?: string;
+    credential: LinkedInCredentialReference;
+    refreshLockVersion: number;
+    revokedAt?: string;
+    revokedByGrantId?: string;
+}
+export interface LinkedInChildConnection {
+    connectionId: string;
+    product: LinkedInProduct;
+    grantId: string;
+    apiVersion: string;
+    enabled: boolean;
+}
+export interface LinkedInInstallation {
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    developerApplicationId: string;
+    ownershipMode: IntegrationOwnershipMode;
+    clientCredentialSecretProvider: string;
+    clientCredentialSecretRef: string;
+    approvals: readonly LinkedInProductApproval[];
+    grants: readonly LinkedInGrant[];
+    resources: readonly LinkedInResourceRef[];
+    roles: Readonly<Record<string, readonly string[]>>;
+    children: readonly LinkedInChildConnection[];
+    capabilities: readonly LinkedInCapabilityDecision[];
+    certifications: readonly LinkedInCertificationEvidence[];
+    createdAt: string;
+    updatedAt: string;
+}
+export declare function assertLinkedInInstallationBoundary(installation: LinkedInInstallation): void;

package/dist/integrations/linkedin/installation.js

@@ -0,0 +1,2 @@
+// @bun
+function r(e){for(let n of e.grants)if(n.installationId!==e.id||n.tenantId!==e.tenantId||n.workspaceId!==e.workspaceId)throw Error("LinkedIn grant crosses its installation boundary")}export{r as assertLinkedInInstallationBoundary};

package/dist/integrations/linkedin/linkedin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/linkedin/media-job-state.d.ts

@@ -0,0 +1,70 @@
+import { type LinkedInMediaJob } from './media-job.js';
+export declare function linkedInMediaNextAction(job: LinkedInMediaJob): {
+    action: 'initialize';
+    partIndex?: undefined;
+} | {
+    action: 'transfer';
+    partIndex: number;
+} | {
+    partIndex?: undefined;
+    action: 'finalize';
+};
+export declare function validateLinkedInMediaJobTransition(before: LinkedInMediaJob, raw: LinkedInMediaJob): Promise<{
+    schemaVersion: 1;
+    plan: {
+        tenantId: string;
+        workspaceId: string;
+        accountId: string;
+        key: string;
+        assetRevisionRef: string;
+        assetDigest: string;
+        rightsGrantRef: string;
+        qualificationRef: string;
+        media: {
+            kind: "image";
+            owner: string;
+            bytes: number;
+        } | {
+            kind: "video";
+            owner: string;
+            bytes: number;
+        };
+    };
+    planDigest: string;
+    version: number;
+    state: "dispatching" | "expired" | "failed" | "processing" | "ready" | "reserved" | "unknown" | "uploading";
+    session?: {
+        reference: string;
+        version: string;
+        digest: string;
+    } | undefined;
+    mediaUrn?: string | undefined;
+    expiresAt?: string | undefined;
+    parts: {
+        firstByte: number;
+        lastByte: number;
+        digest?: string | undefined;
+        etag?: string | undefined;
+        evidenceRef?: string | undefined;
+    }[];
+    claim?: {
+        action: "finalize" | "initialize" | "transfer";
+        partIndex?: number | undefined;
+        requestDigest: string;
+        authorityRef: string;
+        submittedAt: string;
+    } | undefined;
+    evidenceRefs: string[];
+    nextPollAt?: string | undefined;
+}>;
+/** Native upload URL expiry does not expire a successfully processed LinkedIn asset. */
+export declare function linkedInUploadedMedia(raw: LinkedInMediaJob, scope: {
+    tenantId: string;
+    workspaceId: string;
+    accountId: string;
+    assetRevisionRef: string;
+    owner: string;
+}): {
+    kind: "image" | "video";
+    id: string;
+};

package/dist/integrations/linkedin/media-job-state.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as n}from"zod";var c=n.string().trim().min(1).max(200),u=n.string().regex(/^[0-9]{1,30}$/),f=n.string().regex(/^sha256:[a-f0-9]{64}$/),y=n.strictObject({id:u,key:c}),L=n.strictObject({text:n.string().max(25000),madeWithAi:n.boolean(),paidPartnership:n.boolean(),media:n.discriminatedUnion("kind",[n.strictObject({kind:n.literal("images"),assets:n.array(y).min(1).max(4)}),n.strictObject({kind:n.literal("video"),asset:y}),n.strictObject({kind:n.literal("gif"),asset:y})]).optional()}).refine((i)=>i.text.trim().length>0||!!i.media,"A post requires text or media."),M=n.strictObject({tenantId:c,accountId:c,contentRevisionId:c,contentDigest:f,authorId:u,qualificationRef:c,parts:n.array(L).min(1).max(25)}),O=n.strictObject({schemaVersion:n.literal(1),id:c,key:c,plan:M,planDigest:f,version:n.number().int().positive(),parts:n.array(n.strictObject({state:n.enum(["pending","dispatching","created","confirmed","unknown"]),postId:u.optional(),requestDigest:f.optional(),authorityRef:c.optional(),grantRef:c.optional(),evidenceRef:c.optional(),submittedAt:n.iso.datetime().optional(),confirmation:n.strictObject({postId:u,authorId:u,authorityRef:c,replyToId:u.optional(),observedAt:n.iso.datetime(),responseDigest:f,mediaKeys:n.array(c).max(4),media:n.array(n.strictObject({key:c,type:n.enum(["photo","video","animated_gif"])})).max(4)}).optional()})).min(1).max(25)}).superRefine((i,t)=>{if(i.parts.length!==i.plan.parts.length)t.addIssue({code:"custom",message:"Part count changed."});for(let e of i.parts){if(e.state==="pending"&&(e.postId||e.requestDigest||e.authorityRef||e.grantRef||e.submittedAt||e.evidenceRef||e.confirmation))t.addIssue({code:"custom",message:"Pending parts cannot carry execution evidence."});if(e.state!=="pending"&&(!e.requestDigest||!e.authorityRef||!e.submittedAt||!e.grantRef))t.addIssue({code:"custom",message:"Dispatched parts require authority and request evidence."});if(["created","confirmed"].includes(e.state)&&!e.postId)t.addIssue({code:"custom",message:"Created parts require native identity."});if(e.state==="confirmed"&&(!e.evidenceRef||!e.confirmation))t.addIssue({code:"custom",message:"Confirmed parts require read evidence."})}});async function l(i){let t=(s)=>Array.isArray(s)?s.map(t):s&&typeof s==="object"?Object.fromEntries(Object.entries(s).sort(([a],[r])=>a<r?-1:a>r?1:0).map(([a,r])=>[a,t(r)])):s,e=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(JSON.stringify(t(i))));return`sha256:${Array.from(new Uint8Array(e),(s)=>s.toString(16).padStart(2,"0")).join("")}`}function v(i,t){let e=i.plan.parts[t];if(!e)throw Error("X_PART_MISSING");let s=t>0?i.parts[t-1]?.postId:void 0;if(t>0&&!s)throw Error("X_PREDECESSOR_UNRESOLVED");let a=e.media?S(i,t).map((r)=>r.id):void 0;return{text:e.text,made_with_ai:e.madeWithAi,paid_partnership:e.paidPartnership,...a?{media:{media_ids:a}}:{},...s?{reply:{in_reply_to_tweet_id:s}}:{}}}function S(i,t){let e=i.plan.parts[t]?.media;return!e?[]:("assets"in e)?e.assets:[e.asset]}function D(i,t){return l({tenantId:i.plan.tenantId,accountId:i.plan.accountId,authorId:i.plan.authorId,publicationKey:i.key,partIndex:t,method:"POST",path:"/2/tweets",body:v(i,t)})}import{z as o}from"zod";import{z as m}from"zod";var h=m.string().regex(/^urn:li:(person|organization):[A-Za-z0-9_-]+$/),b=m.discriminatedUnion("kind",[m.strictObject({kind:m.literal("image"),owner:h,bytes:m.number().int().positive().max(20000000)}),m.strictObject({kind:m.literal("video"),owner:h,bytes:m.number().int().positive().max(5000000000)})]);import{z as d}from"zod";var g=d.string().trim().min(1).max(200),w=d.string().regex(/^sha256:[a-f0-9]{64}$/),J=d.strictObject({tenantId:g,workspaceId:g,accountId:g,uploadKey:g,requestDigest:w}),z=d.strictObject({kind:d.enum(["image","video"]),owner:d.string().regex(/^urn:li:(person|organization):[A-Za-z0-9_-]+$/),mediaUrn:g,bytes:d.number().int().positive().max(5000000000),expiresAt:d.iso.datetime(),uploadToken:d.string().max(1e4).optional(),parts:d.array(d.strictObject({firstByte:d.number().int().nonnegative(),lastByte:d.number().int().nonnegative(),uploadUrl:d.string().max(16000)})).min(1).max(2000)}).superRefine((i,t)=>{let e=(a)=>t.addIssue({code:"custom",message:a});if(!new RegExp(`^urn:li:${i.kind}:[A-Za-z0-9_-]+$`).test(i.mediaUrn))e("Media identity mismatch.");if(i.kind==="video"&&i.uploadToken===void 0)e("Video sessions require an upload token.");if(i.kind==="image"&&(i.parts.length!==1||i.uploadToken!==void 0))e("Invalid image session.");let s=0;for(let a of i.parts){if(a.firstByte!==s||a.lastByte<a.firstByte||a.lastByte>=i.bytes)e("Invalid media byte range.");s=a.lastByte+1;try{let r=new URL(a.uploadUrl);if(r.origin!=="https://www.linkedin.com"||!r.pathname.startsWith("/dms-uploads/")||r.username||r.password||r.hash)e("Invalid upload origin.")}catch{e("Invalid upload URL.")}}if(s!==i.bytes)e("Incomplete media byte range.")}),R=d.strictObject({reference:d.string().min(1).max(2000),version:g,digest:w});var p=o.string().trim().min(1).max(200),k=o.string().regex(/^sha256:[a-f0-9]{64}$/),P=o.strictObject({tenantId:p,workspaceId:p,accountId:p,key:p,assetRevisionRef:p,assetDigest:k,rightsGrantRef:p,qualificationRef:p,media:b}),x=o.strictObject({schemaVersion:o.literal(1),plan:P,planDigest:k,version:o.number().int().positive(),state:o.enum(["reserved","dispatching","unknown","uploading","processing","ready","failed","expired"]),session:R.optional(),mediaUrn:p.optional(),expiresAt:o.iso.datetime().optional(),parts:o.array(o.strictObject({firstByte:o.number().int().nonnegative(),lastByte:o.number().int().nonnegative(),digest:k.optional(),etag:o.string().min(1).max(1e4).optional(),evidenceRef:p.optional()})).max(2000),claim:o.strictObject({action:o.enum(["initialize","transfer","finalize"]),partIndex:o.number().int().nonnegative().optional(),requestDigest:k,authorityRef:p,submittedAt:o.iso.datetime()}).optional(),evidenceRefs:o.array(p).max(4000),nextPollAt:o.iso.datetime().optional()}).superRefine((i,t)=>{let e=(s)=>t.addIssue({code:"custom",message:s});if(["dispatching","unknown"].includes(i.state)!==!!i.claim)e("Dispatch claims must remain visible until reconciled.");if(["uploading","processing","ready"].includes(i.state)&&(!i.session||!i.mediaUrn||!i.expiresAt||!i.parts.length))e("Upload session is missing.");if(["processing","ready"].includes(i.state)&&i.parts.some((s)=>!s.evidenceRef))e("Media transfer is incomplete.");if(i.state==="reserved"&&(i.session||i.parts.length||i.claim))e("Reserved job already has effects.")});function _(i){if(i.state==="reserved")return{action:"initialize"};let t=i.parts.findIndex((e)=>!e.evidenceRef);return t>=0?{action:"transfer",partIndex:t}:{action:"finalize"}}async function W(i,t){let e=x.parse(t);if(e.version!==i.version+1||e.planDigest!==i.planDigest||await l(e.plan)!==i.planDigest)throw Error("LINKEDIN_JOB_IMMUTABLE");if(!{reserved:["dispatching"],dispatching:["unknown","uploading","processing","expired"],unknown:["uploading","processing","expired"],uploading:["dispatching","processing","expired"],processing:["processing","ready","failed"],ready:[],failed:[],expired:[]}[i.state].includes(e.state))throw Error("LINKEDIN_JOB_TRANSITION");if(i.session&&(await l(i.session)!==await l(e.session)||i.mediaUrn!==e.mediaUrn||i.expiresAt!==e.expiresAt))throw Error("LINKEDIN_JOB_SESSION_IMMUTABLE");if(i.evidenceRefs.some((a,r)=>e.evidenceRefs[r]!==a))throw Error("LINKEDIN_JOB_EVIDENCE_IMMUTABLE");if(e.state==="dispatching"){let a=_(i),r=await l({planDigest:i.planDigest,session:i.session,action:a});if(e.claim?.requestDigest!==r)throw Error("LINKEDIN_JOB_REQUEST");if(e.claim?.action!==a.action||e.claim?.partIndex!==("partIndex"in a?a.partIndex:void 0))throw Error("LINKEDIN_JOB_CLAIM")}if(e.state==="unknown"&&await l(e.claim)!==await l(i.claim))throw Error("LINKEDIN_JOB_CLAIM");if(i.claim&&!["unknown","expired"].includes(e.state)){if(e.claim||e.state!==(i.claim.action==="finalize"?"processing":"uploading")||e.evidenceRefs.length!==i.evidenceRefs.length+1)throw Error("LINKEDIN_JOB_RECEIPT")}for(let a=0;a<i.parts.length;a++){let r=i.parts[a],I=e.parts[a];if(!I||r.digest!==void 0&&r.digest!==I.digest||r.firstByte!==I.firstByte||r.lastByte!==I.lastByte||r.evidenceRef&&await l(r)!==await l(I))throw Error("LINKEDIN_JOB_PART_IMMUTABLE")}if(i.parts.length&&i.parts.length!==e.parts.length)throw Error("LINKEDIN_JOB_PART_IMMUTABLE");return e}function Z(i,t){let e=x.parse(i);if(e.state!=="ready"||!e.mediaUrn||e.plan.tenantId!==t.tenantId||e.plan.workspaceId!==t.workspaceId||e.plan.accountId!==t.accountId||e.plan.assetRevisionRef!==t.assetRevisionRef||e.plan.media.owner!==t.owner)throw Error("LINKEDIN_MEDIA_NOT_READY");return{kind:e.plan.media.kind,id:e.mediaUrn}}export{_ as linkedInMediaNextAction,Z as linkedInUploadedMedia,W as validateLinkedInMediaJobTransition};