@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/social/x-publication.d.ts

@@ -0,0 +1,143 @@
+import { z } from 'zod';
+export declare const XPublicationPartSchema: z.ZodObject<{
+    text: z.ZodString;
+    madeWithAi: z.ZodBoolean;
+    paidPartnership: z.ZodBoolean;
+    media: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"images">;
+        assets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            key: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"video">;
+        asset: z.ZodObject<{
+            id: z.ZodString;
+            key: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gif">;
+        asset: z.ZodObject<{
+            id: z.ZodString;
+            key: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>;
+/** The host qualifies weighted text limits, account tier, reply eligibility, media ownership and disclosures. */
+export declare const XPublicationPlanSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    accountId: z.ZodString;
+    contentRevisionId: z.ZodString;
+    contentDigest: z.ZodString;
+    authorId: z.ZodString;
+    qualificationRef: z.ZodString;
+    parts: z.ZodArray<z.ZodObject<{
+        text: z.ZodString;
+        madeWithAi: z.ZodBoolean;
+        paidPartnership: z.ZodBoolean;
+        media: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"images">;
+            assets: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                key: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"video">;
+            asset: z.ZodObject<{
+                id: z.ZodString;
+                key: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gif">;
+            asset: z.ZodObject<{
+                id: z.ZodString;
+                key: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const XPublicationRecordSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    key: z.ZodString;
+    plan: z.ZodObject<{
+        tenantId: z.ZodString;
+        accountId: z.ZodString;
+        contentRevisionId: z.ZodString;
+        contentDigest: z.ZodString;
+        authorId: z.ZodString;
+        qualificationRef: z.ZodString;
+        parts: z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            madeWithAi: z.ZodBoolean;
+            paidPartnership: z.ZodBoolean;
+            media: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"images">;
+                assets: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    key: z.ZodString;
+                }, z.core.$strict>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"video">;
+                asset: z.ZodObject<{
+                    id: z.ZodString;
+                    key: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"gif">;
+                asset: z.ZodObject<{
+                    id: z.ZodString;
+                    key: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>], "kind">>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    planDigest: z.ZodString;
+    version: z.ZodNumber;
+    parts: z.ZodArray<z.ZodObject<{
+        state: z.ZodEnum<{
+            confirmed: "confirmed";
+            created: "created";
+            dispatching: "dispatching";
+            pending: "pending";
+            unknown: "unknown";
+        }>;
+        postId: z.ZodOptional<z.ZodString>;
+        requestDigest: z.ZodOptional<z.ZodString>;
+        authorityRef: z.ZodOptional<z.ZodString>;
+        grantRef: z.ZodOptional<z.ZodString>;
+        evidenceRef: z.ZodOptional<z.ZodString>;
+        submittedAt: z.ZodOptional<z.ZodISODateTime>;
+        confirmation: z.ZodOptional<z.ZodObject<{
+            postId: z.ZodString;
+            authorId: z.ZodString;
+            authorityRef: z.ZodString;
+            replyToId: z.ZodOptional<z.ZodString>;
+            observedAt: z.ZodISODateTime;
+            responseDigest: z.ZodString;
+            mediaKeys: z.ZodArray<z.ZodString>;
+            media: z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                type: z.ZodEnum<{
+                    animated_gif: "animated_gif";
+                    photo: "photo";
+                    video: "video";
+                }>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type XPublicationPlan = z.infer<typeof XPublicationPlanSchema>;
+export type XPublicationRecord = z.infer<typeof XPublicationRecordSchema>;
+export interface XPublicationStore {
+    get(tenantId: string, accountId: string, key: string): Promise<XPublicationRecord | undefined>;
+    reserve(record: XPublicationRecord): Promise<XPublicationRecord>;
+    save(record: XPublicationRecord, expectedVersion: number): Promise<boolean>;
+}
+export declare function xPublicationDigest(value: unknown): Promise<string>;
+export declare function xPublicationBody(record: XPublicationRecord, index: number): Record<string, unknown>;
+export declare function xPublicationMedia(record: XPublicationRecord, index: number): {
+    id: string;
+    key: string;
+}[];
+export declare function xPublicationRequestDigest(record: XPublicationRecord, index: number): Promise<string>;

package/dist/integrations/social/x-publication.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";var a=e.string().trim().min(1).max(200),c=e.string().regex(/^[0-9]{1,30}$/),d=e.string().regex(/^sha256:[a-f0-9]{64}$/),u=e.strictObject({id:c,key:a}),p=e.strictObject({text:e.string().max(25000),madeWithAi:e.boolean(),paidPartnership:e.boolean(),media:e.discriminatedUnion("kind",[e.strictObject({kind:e.literal("images"),assets:e.array(u).min(1).max(4)}),e.strictObject({kind:e.literal("video"),asset:u}),e.strictObject({kind:e.literal("gif"),asset:u})]).optional()}).refine((i)=>i.text.trim().length>0||!!i.media,"A post requires text or media."),m=e.strictObject({tenantId:a,accountId:a,contentRevisionId:a,contentDigest:d,authorId:c,qualificationRef:a,parts:e.array(p).min(1).max(25)}),y=e.strictObject({schemaVersion:e.literal(1),id:a,key:a,plan:m,planDigest:d,version:e.number().int().positive(),parts:e.array(e.strictObject({state:e.enum(["pending","dispatching","created","confirmed","unknown"]),postId:c.optional(),requestDigest:d.optional(),authorityRef:a.optional(),grantRef:a.optional(),evidenceRef:a.optional(),submittedAt:e.iso.datetime().optional(),confirmation:e.strictObject({postId:c,authorId:c,authorityRef:a,replyToId:c.optional(),observedAt:e.iso.datetime(),responseDigest:d,mediaKeys:e.array(a).max(4),media:e.array(e.strictObject({key:a,type:e.enum(["photo","video","animated_gif"])})).max(4)}).optional()})).min(1).max(25)}).superRefine((i,n)=>{if(i.parts.length!==i.plan.parts.length)n.addIssue({code:"custom",message:"Part count changed."});for(let t of i.parts){if(t.state==="pending"&&(t.postId||t.requestDigest||t.authorityRef||t.grantRef||t.submittedAt||t.evidenceRef||t.confirmation))n.addIssue({code:"custom",message:"Pending parts cannot carry execution evidence."});if(t.state!=="pending"&&(!t.requestDigest||!t.authorityRef||!t.submittedAt||!t.grantRef))n.addIssue({code:"custom",message:"Dispatched parts require authority and request evidence."});if(["created","confirmed"].includes(t.state)&&!t.postId)n.addIssue({code:"custom",message:"Created parts require native identity."});if(t.state==="confirmed"&&(!t.evidenceRef||!t.confirmation))n.addIssue({code:"custom",message:"Confirmed parts require read evidence."})}});async function l(i){let n=(r)=>Array.isArray(r)?r.map(n):r&&typeof r==="object"?Object.fromEntries(Object.entries(r).sort(([o],[s])=>o<s?-1:o>s?1:0).map(([o,s])=>[o,n(s)])):r,t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(JSON.stringify(n(i))));return`sha256:${Array.from(new Uint8Array(t),(r)=>r.toString(16).padStart(2,"0")).join("")}`}function f(i,n){let t=i.plan.parts[n];if(!t)throw Error("X_PART_MISSING");let r=n>0?i.parts[n-1]?.postId:void 0;if(n>0&&!r)throw Error("X_PREDECESSOR_UNRESOLVED");let o=t.media?b(i,n).map((s)=>s.id):void 0;return{text:t.text,made_with_ai:t.madeWithAi,paid_partnership:t.paidPartnership,...o?{media:{media_ids:o}}:{},...r?{reply:{in_reply_to_tweet_id:r}}:{}}}function b(i,n){let t=i.plan.parts[n]?.media;return!t?[]:("assets"in t)?t.assets:[t.asset]}function h(i,n){return l({tenantId:i.plan.tenantId,accountId:i.plan.accountId,authorId:i.plan.authorId,publicationKey:i.key,partIndex:n,method:"POST",path:"/2/tweets",body:f(i,n)})}export{p as XPublicationPartSchema,m as XPublicationPlanSchema,y as XPublicationRecordSchema,f as xPublicationBody,l as xPublicationDigest,b as xPublicationMedia,h as xPublicationRequestDigest};

package/dist/integrations/social/x-upload-state.d.ts

@@ -0,0 +1,53 @@
+import { type XUploadRecord } from './x-upload.js';
+export declare function xUploadAction(record: XUploadRecord, index: number): "append" | "finalize" | "initialize";
+export declare function xUploadRequestDigest(record: XUploadRecord, index: number): Promise<string>;
+/** Shared persistence invariant; no mutation may reset an uncertain request for resubmission. */
+export declare function validateXUploadTransition(before: XUploadRecord, raw: XUploadRecord): Promise<{
+    schemaVersion: 1;
+    plan: {
+        tenantId: string;
+        workspaceId: string;
+        accountId: string;
+        key: string;
+        assetRevisionRef: string;
+        assetDigest: string;
+        rightsGrantRef: string;
+        qualificationRef: string;
+        category: "tweet_gif" | "tweet_image" | "tweet_video";
+        mediaType: "image/gif" | "image/jpeg" | "image/png" | "image/webp" | "video/mp4" | "video/quicktime" | "video/webm";
+        chunks: {
+            bytes: number;
+            digest: string;
+        }[];
+    };
+    planDigest: string;
+    version: number;
+    state: "expired" | "failed" | "processing" | "ready" | "uploading";
+    steps: {
+        state: "confirmed" | "dispatching" | "pending" | "unknown";
+        requestDigest?: string | undefined;
+        authorityRef?: string | undefined;
+        submittedAt?: string | undefined;
+        evidenceRef?: string | undefined;
+    }[];
+    native?: {
+        id: string;
+        key: string;
+        expiresAt: string;
+    } | undefined;
+    nextPollAt?: string | undefined;
+    processingEvidence?: {
+        observedAt: string;
+        responseDigest: string;
+        authorityRef: string;
+    } | undefined;
+}>;
+/** Ready identity is usable only in its original scope and before native expiry. Rights are rechecked at publication. */
+export declare function xUploadedAsset(record: XUploadRecord, scope: {
+    tenantId: string;
+    accountId: string;
+    assetRevisionRef: string;
+}, now: Date): {
+    id: string;
+    key: string;
+};

package/dist/integrations/social/x-upload-state.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as n}from"zod";var r=n.string().trim().min(1).max(200),p=n.string().regex(/^[0-9]{1,30}$/),g=n.string().regex(/^sha256:[a-f0-9]{64}$/),y=n.strictObject({id:p,key:r}),R=n.strictObject({text:n.string().max(25000),madeWithAi:n.boolean(),paidPartnership:n.boolean(),media:n.discriminatedUnion("kind",[n.strictObject({kind:n.literal("images"),assets:n.array(y).min(1).max(4)}),n.strictObject({kind:n.literal("video"),asset:y}),n.strictObject({kind:n.literal("gif"),asset:y})]).optional()}).refine((e)=>e.text.trim().length>0||!!e.media,"A post requires text or media."),b=n.strictObject({tenantId:r,accountId:r,contentRevisionId:r,contentDigest:g,authorId:p,qualificationRef:r,parts:n.array(R).min(1).max(25)}),U=n.strictObject({schemaVersion:n.literal(1),id:r,key:r,plan:b,planDigest:g,version:n.number().int().positive(),parts:n.array(n.strictObject({state:n.enum(["pending","dispatching","created","confirmed","unknown"]),postId:p.optional(),requestDigest:g.optional(),authorityRef:r.optional(),grantRef:r.optional(),evidenceRef:r.optional(),submittedAt:n.iso.datetime().optional(),confirmation:n.strictObject({postId:p,authorId:p,authorityRef:r,replyToId:p.optional(),observedAt:n.iso.datetime(),responseDigest:g,mediaKeys:n.array(r).max(4),media:n.array(n.strictObject({key:r,type:n.enum(["photo","video","animated_gif"])})).max(4)}).optional()})).min(1).max(25)}).superRefine((e,i)=>{if(e.parts.length!==e.plan.parts.length)i.addIssue({code:"custom",message:"Part count changed."});for(let t of e.parts){if(t.state==="pending"&&(t.postId||t.requestDigest||t.authorityRef||t.grantRef||t.submittedAt||t.evidenceRef||t.confirmation))i.addIssue({code:"custom",message:"Pending parts cannot carry execution evidence."});if(t.state!=="pending"&&(!t.requestDigest||!t.authorityRef||!t.submittedAt||!t.grantRef))i.addIssue({code:"custom",message:"Dispatched parts require authority and request evidence."});if(["created","confirmed"].includes(t.state)&&!t.postId)i.addIssue({code:"custom",message:"Created parts require native identity."});if(t.state==="confirmed"&&(!t.evidenceRef||!t.confirmation))i.addIssue({code:"custom",message:"Confirmed parts require read evidence."})}});async function u(e){let i=(o)=>Array.isArray(o)?o.map(i):o&&typeof o==="object"?Object.fromEntries(Object.entries(o).sort(([a],[d])=>a<d?-1:a>d?1:0).map(([a,d])=>[a,i(d)])):o,t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(JSON.stringify(i(e))));return`sha256:${Array.from(new Uint8Array(t),(o)=>o.toString(16).padStart(2,"0")).join("")}`}function v(e,i){let t=e.plan.parts[i];if(!t)throw Error("X_PART_MISSING");let o=i>0?e.parts[i-1]?.postId:void 0;if(i>0&&!o)throw Error("X_PREDECESSOR_UNRESOLVED");let a=t.media?I(e,i).map((d)=>d.id):void 0;return{text:t.text,made_with_ai:t.madeWithAi,paid_partnership:t.paidPartnership,...a?{media:{media_ids:a}}:{},...o?{reply:{in_reply_to_tweet_id:o}}:{}}}function I(e,i){let t=e.plan.parts[i]?.media;return!t?[]:("assets"in t)?t.assets:[t.asset]}function _(e,i){return u({tenantId:e.plan.tenantId,accountId:e.plan.accountId,authorId:e.plan.authorId,publicationKey:e.key,partIndex:i,method:"POST",path:"/2/tweets",body:v(e,i)})}import{z as s}from"zod";var c=s.string().trim().min(1).max(200),m=s.string().regex(/^sha256:[a-f0-9]{64}$/),P=s.strictObject({tenantId:c,workspaceId:c,accountId:c,key:c,assetRevisionRef:c,assetDigest:m,rightsGrantRef:c,qualificationRef:c,category:s.enum(["tweet_image","tweet_video","tweet_gif"]),mediaType:s.enum(["image/jpeg","image/png","image/webp","image/gif","video/mp4","video/webm","video/quicktime"]),chunks:s.array(s.strictObject({bytes:s.number().int().positive().max(5000000),digest:m})).min(1).max(500)}).superRefine((e,i)=>{if(!(e.category==="tweet_gif"?e.mediaType==="image/gif":e.category==="tweet_video"?e.mediaType.startsWith("video/"):e.mediaType.startsWith("image/")&&e.mediaType!=="image/gif"))i.addIssue({code:"custom",message:"Media type/category mismatch."})}),h=s.strictObject({schemaVersion:s.literal(1),plan:P,planDigest:m,version:s.number().int().positive(),state:s.enum(["uploading","processing","ready","failed","expired"]),steps:s.array(s.strictObject({state:s.enum(["pending","dispatching","unknown","confirmed"]),requestDigest:m.optional(),authorityRef:c.optional(),submittedAt:s.iso.datetime().optional(),evidenceRef:c.optional()})).min(3).max(502),native:s.strictObject({id:s.string().regex(/^[0-9]{1,19}$/),key:c,expiresAt:s.iso.datetime()}).optional(),nextPollAt:s.iso.datetime().optional(),processingEvidence:s.strictObject({observedAt:s.iso.datetime(),responseDigest:m,authorityRef:c}).optional()}).superRefine((e,i)=>{let t=(a)=>i.addIssue({code:"custom",message:a});if(e.steps.length!==e.plan.chunks.length+2)t("Upload step count changed.");let o=!1;for(let a of e.steps){if(o&&a.state!=="pending")t("Upload steps must execute sequentially.");if(a.state!=="confirmed")o=!0;if(a.state==="pending"&&Object.keys(a).length!==1)t("Pending steps have no dispatch evidence.");if(a.state!=="pending"&&(!a.requestDigest||!a.authorityRef||!a.submittedAt))t("Dispatched steps require evidence.");if(a.state==="confirmed"&&!a.evidenceRef)t("Confirmed steps require evidence.")}if(e.steps[0]?.state==="confirmed"&&!e.native)t("Initialized uploads require native identity.");if(["processing","ready"].includes(e.state)&&e.steps.some((a)=>a.state!=="confirmed"))t("Processing requires completed upload.");if(e.state==="ready"&&!e.processingEvidence)t("Ready media requires processing evidence.")});function x(e,i){return i===0?"initialize":i===e.steps.length-1?"finalize":"append"}async function w(e,i){return u({planDigest:e.planDigest,index:i,action:x(e,i),nativeId:i?e.native?.id:void 0})}async function T(e,i){let t=h.parse(i);if(t.version!==e.version+1||t.planDigest!==e.planDigest||await u(t.plan)!==e.planDigest)throw Error("X_UPLOAD_IMMUTABLE");if(e.native&&JSON.stringify(e.native)!==JSON.stringify(t.native))throw Error("X_UPLOAD_NATIVE_IMMUTABLE");if(["ready","failed","expired"].includes(e.state)){if(!(e.state==="ready"&&t.state==="expired"))throw Error("X_UPLOAD_TERMINAL")}let o=[];for(let a=0;a<e.steps.length;a++){let d=e.steps[a],l=t.steps[a];if(await u(d)===await u(l))continue;if(o.push(a),!{pending:["dispatching"],dispatching:["unknown","confirmed"],unknown:["confirmed"],confirmed:[]}[d.state].includes(l.state)||l.requestDigest!==await w(e,a))throw Error("X_UPLOAD_TRANSITION");for(let f of["requestDigest","authorityRef","submittedAt"])if(d[f]&&d[f]!==l[f])throw Error("X_UPLOAD_EVIDENCE_IMMUTABLE")}if(o.length>1||!e.native&&t.native&&!(o[0]===0&&t.steps[0]?.state==="confirmed"))throw Error("X_UPLOAD_TRANSITION");if(e.state==="processing"&&!["processing","ready","failed","expired"].includes(t.state))throw Error("X_UPLOAD_TRANSITION");if(!o.length&&t.state==="uploading")throw Error("X_UPLOAD_TRANSITION");return t}function q(e,i,t){if(h.parse(e),e.plan.tenantId!==i.tenantId||e.plan.accountId!==i.accountId||e.plan.assetRevisionRef!==i.assetRevisionRef||e.state!=="ready"||!e.native||!Number.isFinite(t.getTime())||Date.parse(e.native.expiresAt)<=t.getTime())throw Error("X_UPLOAD_NOT_READY");return{id:e.native.id,key:e.native.key}}export{T as validateXUploadTransition,x as xUploadAction,w as xUploadRequestDigest,q as xUploadedAsset};

package/dist/integrations/social/x-upload.d.ts

@@ -0,0 +1,111 @@
+import { z } from 'zod';
+export declare const XUploadPlanSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    accountId: z.ZodString;
+    key: z.ZodString;
+    assetRevisionRef: z.ZodString;
+    assetDigest: z.ZodString;
+    rightsGrantRef: z.ZodString;
+    qualificationRef: z.ZodString;
+    category: z.ZodEnum<{
+        tweet_gif: "tweet_gif";
+        tweet_image: "tweet_image";
+        tweet_video: "tweet_video";
+    }>;
+    mediaType: z.ZodEnum<{
+        "image/gif": "image/gif";
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+        "image/webp": "image/webp";
+        "video/mp4": "video/mp4";
+        "video/quicktime": "video/quicktime";
+        "video/webm": "video/webm";
+    }>;
+    chunks: z.ZodArray<z.ZodObject<{
+        bytes: z.ZodNumber;
+        digest: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const XUploadRecordSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    plan: z.ZodObject<{
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        accountId: z.ZodString;
+        key: z.ZodString;
+        assetRevisionRef: z.ZodString;
+        assetDigest: z.ZodString;
+        rightsGrantRef: z.ZodString;
+        qualificationRef: z.ZodString;
+        category: z.ZodEnum<{
+            tweet_gif: "tweet_gif";
+            tweet_image: "tweet_image";
+            tweet_video: "tweet_video";
+        }>;
+        mediaType: z.ZodEnum<{
+            "image/gif": "image/gif";
+            "image/jpeg": "image/jpeg";
+            "image/png": "image/png";
+            "image/webp": "image/webp";
+            "video/mp4": "video/mp4";
+            "video/quicktime": "video/quicktime";
+            "video/webm": "video/webm";
+        }>;
+        chunks: z.ZodArray<z.ZodObject<{
+            bytes: z.ZodNumber;
+            digest: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    planDigest: z.ZodString;
+    version: z.ZodNumber;
+    state: z.ZodEnum<{
+        expired: "expired";
+        failed: "failed";
+        processing: "processing";
+        ready: "ready";
+        uploading: "uploading";
+    }>;
+    steps: z.ZodArray<z.ZodObject<{
+        state: z.ZodEnum<{
+            confirmed: "confirmed";
+            dispatching: "dispatching";
+            pending: "pending";
+            unknown: "unknown";
+        }>;
+        requestDigest: z.ZodOptional<z.ZodString>;
+        authorityRef: z.ZodOptional<z.ZodString>;
+        submittedAt: z.ZodOptional<z.ZodISODateTime>;
+        evidenceRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    native: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        key: z.ZodString;
+        expiresAt: z.ZodISODateTime;
+    }, z.core.$strict>>;
+    nextPollAt: z.ZodOptional<z.ZodISODateTime>;
+    processingEvidence: z.ZodOptional<z.ZodObject<{
+        observedAt: z.ZodISODateTime;
+        responseDigest: z.ZodString;
+        authorityRef: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type XUploadPlan = z.infer<typeof XUploadPlanSchema>;
+export type XUploadRecord = z.infer<typeof XUploadRecordSchema>;
+export interface XUploadStore {
+    get(tenantId: string, accountId: string, key: string): Promise<XUploadRecord | undefined>;
+    reserve(record: XUploadRecord): Promise<XUploadRecord>;
+    save(record: XUploadRecord, expectedVersion: number): Promise<boolean>;
+}
+/** Host validates the immutable asset manifest, native access, technical limits and rights. */
+export interface XUploadAuthority {
+    authorize(input: {
+        record: XUploadRecord;
+        action: 'read' | 'initialize' | 'append' | 'finalize' | 'status';
+        stepIndex?: number;
+        requestDigest?: string;
+    }): Promise<{
+        credentialRef: string;
+        receiptRef: string;
+    }>;
+}

package/dist/integrations/social/x-upload.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";var s=e.string().trim().min(1).max(200),n=e.string().regex(/^sha256:[a-f0-9]{64}$/),d=e.strictObject({tenantId:s,workspaceId:s,accountId:s,key:s,assetRevisionRef:s,assetDigest:n,rightsGrantRef:s,qualificationRef:s,category:e.enum(["tweet_image","tweet_video","tweet_gif"]),mediaType:e.enum(["image/jpeg","image/png","image/webp","image/gif","video/mp4","video/webm","video/quicktime"]),chunks:e.array(e.strictObject({bytes:e.number().int().positive().max(5000000),digest:n})).min(1).max(500)}).superRefine((t,o)=>{if(!(t.category==="tweet_gif"?t.mediaType==="image/gif":t.category==="tweet_video"?t.mediaType.startsWith("video/"):t.mediaType.startsWith("image/")&&t.mediaType!=="image/gif"))o.addIssue({code:"custom",message:"Media type/category mismatch."})}),c=e.strictObject({schemaVersion:e.literal(1),plan:d,planDigest:n,version:e.number().int().positive(),state:e.enum(["uploading","processing","ready","failed","expired"]),steps:e.array(e.strictObject({state:e.enum(["pending","dispatching","unknown","confirmed"]),requestDigest:n.optional(),authorityRef:s.optional(),submittedAt:e.iso.datetime().optional(),evidenceRef:s.optional()})).min(3).max(502),native:e.strictObject({id:e.string().regex(/^[0-9]{1,19}$/),key:s,expiresAt:e.iso.datetime()}).optional(),nextPollAt:e.iso.datetime().optional(),processingEvidence:e.strictObject({observedAt:e.iso.datetime(),responseDigest:n,authorityRef:s}).optional()}).superRefine((t,o)=>{let a=(i)=>o.addIssue({code:"custom",message:i});if(t.steps.length!==t.plan.chunks.length+2)a("Upload step count changed.");let r=!1;for(let i of t.steps){if(r&&i.state!=="pending")a("Upload steps must execute sequentially.");if(i.state!=="confirmed")r=!0;if(i.state==="pending"&&Object.keys(i).length!==1)a("Pending steps have no dispatch evidence.");if(i.state!=="pending"&&(!i.requestDigest||!i.authorityRef||!i.submittedAt))a("Dispatched steps require evidence.");if(i.state==="confirmed"&&!i.evidenceRef)a("Confirmed steps require evidence.")}if(t.steps[0]?.state==="confirmed"&&!t.native)a("Initialized uploads require native identity.");if(["processing","ready"].includes(t.state)&&t.steps.some((i)=>i.state!=="confirmed"))a("Processing requires completed upload.");if(t.state==="ready"&&!t.processingEvidence)a("Ready media requires processing evidence.")});export{d as XUploadPlanSchema,c as XUploadRecordSchema};

package/dist/integrations/social/x-withdrawal.d.ts

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+/** Authorized immutable mapping from a registered content use to its native post. */
+export declare const XWithdrawalTargetSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    accountId: z.ZodString;
+    useId: z.ZodString;
+    publicationRef: z.ZodString;
+    postId: z.ZodString;
+    authorId: z.ZodString;
+    ownershipEvidenceRef: z.ZodString;
+}, z.core.$strict>;
+export type XWithdrawalTarget = z.infer<typeof XWithdrawalTargetSchema>;

package/dist/integrations/social/x-withdrawal.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";var i=t.strictObject({tenantId:t.string().min(1),workspaceId:t.string().min(1),accountId:t.string().min(1),useId:t.string().min(1),publicationRef:t.string().min(1),postId:t.string().regex(/^[0-9]{1,19}$/),authorId:t.string().regex(/^[0-9]{1,19}$/),ownershipEvidenceRef:t.string().min(1)});export{i as XWithdrawalTargetSchema};

package/dist/integrations/social/x.d.ts

@@ -0,0 +1,84 @@
+export type XCapabilityId = 'x.content.read' | 'x.profile.read';
+export interface XCapabilityDecision {
+    capability: XCapabilityId;
+    state: 'approval_required' | 'available' | 'disabled' | 'unavailable';
+    reason: string;
+}
+export interface XInstallation {
+    capabilities: readonly XCapabilityDecision[];
+}
+export interface XRequestContext {
+    capability: XCapabilityId;
+    connectionId: string;
+    installationId: string;
+    requestId: string;
+    tenantId: string;
+    workspaceId: string;
+}
+export interface XProfileRecord {
+    description?: string;
+    displayName?: string;
+    followersCount?: number;
+    followingCount?: number;
+    id: string;
+    native: Record<string, unknown>;
+    profileImageUrl?: string;
+    tweetCount?: number;
+    username: string;
+    verified?: boolean;
+}
+export interface XContentRecord {
+    authorId?: string;
+    commentCount?: number;
+    id: string;
+    kind: 'post' | 'reply' | 'repost' | 'thread';
+    likeCount?: number;
+    native: Record<string, unknown>;
+    permalink?: string;
+    publishedAt?: string;
+    text: string;
+    viewCount?: number;
+}
+export interface XPageInfo {
+    cursor?: string;
+    hasMore: boolean;
+}
+export interface XOperationResult<T> {
+    capability: XCapabilityDecision;
+    output: T;
+    providerRequestId?: string;
+    requestId: string;
+}
+export interface XSocialProvider {
+    discoverCapabilities(installation: XInstallation, requested?: readonly XCapabilityId[]): Promise<readonly XCapabilityDecision[]>;
+    getContent(request: {
+        context: XRequestContext;
+        effect: 'read';
+        input: {
+            id: string;
+        };
+        operationKey: 'x.content.get';
+    }): Promise<XOperationResult<XContentRecord>>;
+    getProfile(request: {
+        context: XRequestContext;
+        effect: 'read';
+        input: {
+            id?: string;
+            username?: string;
+        };
+        operationKey: 'x.profile.get';
+    }): Promise<XOperationResult<XProfileRecord>>;
+    listContent(request: {
+        context: XRequestContext;
+        effect: 'read';
+        input: {
+            cursor?: string;
+            limit?: number;
+            userId?: string;
+        };
+        operationKey: 'x.content.list';
+    }): Promise<XOperationResult<{
+        items: readonly XContentRecord[];
+        page: XPageInfo;
+    }>>;
+}

package/dist/integrations/social/x.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/spec.d.ts

@@ -0,0 +1,119 @@
+import type { IntegrationCategory, IntegrationOwnershipMode } from '@lssm/lib.contracts-spec/app-config';
+import type { CapabilityRef, CapabilityRequirement } from '@lssm/lib.contracts-spec/capabilities';
+import type { OwnerShipMeta } from '@lssm/lib.contracts-spec/ownership';
+import { SpecContractRegistry } from '@lssm/lib.contracts-spec/registry';
+import type { IntegrationAuthConfig } from './auth.js';
+import type { IntegrationCredentialManifest } from './credentials.js';
+import type { IntegrationTransportConfig, IntegrationTransportType } from './transport.js';
+import type { IntegrationVersionPolicy } from './versioning.js';
+export type { IntegrationCategory, IntegrationOwnershipMode };
+export interface IntegrationMeta extends OwnerShipMeta {
+    category: IntegrationCategory;
+}
+export interface IntegrationCapabilityMapping {
+    /** Which CapabilitySpec this integration provides. */
+    provides: CapabilityRef[];
+    /** Optional: which capabilities it requires (e.g., storage for caching). */
+    requires?: CapabilityRequirement[];
+}
+export type IntegrationBridgeTargetChannel = 'email' | 'sms' | 'slack' | 'discord' | 'signal' | 'telegram' | 'whatsapp' | 'teams' | 'github' | 'irc' | 'xmpp' | 'zulip' | 'mattermost' | 'matrix' | 'custom';
+export interface IntegrationBridgeTarget {
+    /** Human-readable or provider key for the bridged channel. */
+    key: IntegrationBridgeTargetChannel;
+    /** Optional bridge implementation or appservice identifier. */
+    bridgeKey?: string;
+    /** Capabilities that are expected through the bridge. */
+    capabilities: CapabilityRef[];
+    /** Whether a first-party/direct provider remains the preferred path. */
+    directProviderPreferred?: boolean;
+    /** Descriptive caveats such as unsupported attachments, threading, or reactions. */
+    caveats?: string[];
+}
+export interface IntegrationBridgeMetadata {
+    /** Provider can act as an interoperability hub for these bridged targets. */
+    targets: IntegrationBridgeTarget[];
+    /** Whether bridge setup is only described, not provisioned by this package. */
+    provisioning: 'not-managed' | 'external' | 'managed';
+    /** Explicit guard that bridged metadata must not replace direct provider specs. */
+    preserveDirectProviders?: boolean;
+    /** Neutral docs or ecosystem references for operator setup. */
+    docsUrl?: string;
+}
+export interface IntegrationConfigSchema {
+    /** JSON Schema or SchemaModel defining required config fields. */
+    schema: unknown;
+    /** Example configuration (for docs/UI). */
+    example?: Record<string, unknown>;
+}
+export interface IntegrationSecretSchema {
+    /** JSON Schema or SchemaModel describing secret fields. */
+    schema: unknown;
+    /** Redacted example for documentation/UI. */
+    example?: Record<string, string>;
+}
+export interface IntegrationByokSetup {
+    /** Human-readable instructions for tenants configuring BYOK accounts. */
+    setupInstructions?: string;
+    /** Required scopes/permissions for BYOK accounts. */
+    requiredScopes?: string[];
+    /** Provider endpoint that can be called to validate a BYOK key. */
+    validationEndpoint?: string;
+    /** Whether the provider supports programmatic key rotation. */
+    keyRotationSupported?: boolean;
+    /** Whether quota usage can be tracked per BYOK key. */
+    quotaTrackingSupported?: boolean;
+    /** Ordered steps a tenant must follow to provision BYOK credentials. */
+    provisioningSteps?: string[];
+}
+export interface IntegrationHealthCheck {
+    /** Endpoint or method to validate connection health. */
+    method?: 'ping' | 'list' | 'custom';
+    /** Timeout in ms for health check. */
+    timeoutMs?: number;
+}
+export interface IntegrationSpec {
+    meta: IntegrationMeta;
+    /** Supported ownership modes for this provider. */
+    supportedModes: IntegrationOwnershipMode[];
+    /** Which capabilities this integration provides/requires. */
+    capabilities: IntegrationCapabilityMapping;
+    /** Configuration schema (API keys, endpoints, etc.). */
+    configSchema: IntegrationConfigSchema;
+    /** Secret schema (API/key material stored via secretRef). */
+    secretSchema: IntegrationSecretSchema;
+    /** Optional health check configuration. */
+    healthCheck?: IntegrationHealthCheck;
+    /** Documentation URL. */
+    docsUrl?: string;
+    /** Rate limits or usage constraints. */
+    constraints?: {
+        rateLimit?: {
+            rpm?: number;
+            rph?: number;
+        };
+        quotas?: Record<string, number>;
+    };
+    /** Provider-specific metadata for BYOK setup flows. */
+    byokSetup?: IntegrationByokSetup;
+    /** Bridge/interoperability metadata for providers that can relay to other channels. */
+    bridgeMetadata?: IntegrationBridgeMetadata;
+    /** Managed/BYOK credential setup requirements for config, secrets, env aliases, validation, and rotation. */
+    credentialManifest?: IntegrationCredentialManifest;
+    /** Transports this integration supports (REST, MCP, Webhook, SDK). */
+    transports?: IntegrationTransportConfig[];
+    /** Preferred transport when multiple are available. */
+    preferredTransport?: IntegrationTransportType;
+    /** Authentication methods this integration supports. */
+    supportedAuthMethods?: IntegrationAuthConfig[];
+    /** API version policy for this provider. */
+    versionPolicy?: IntegrationVersionPolicy;
+}
+export declare class IntegrationSpecRegistry extends SpecContractRegistry<'integration', IntegrationSpec> {
+    constructor(items?: IntegrationSpec[]);
+    getByCategory(category: IntegrationCategory): IntegrationSpec[];
+}
+export declare function makeIntegrationSpecKey(meta: IntegrationMeta): string;
+/**
+ * Helper to define an Integration.
+ */
+export declare const defineIntegration: (spec: IntegrationSpec) => IntegrationSpec;

package/dist/integrations/spec.js

@@ -0,0 +1,2 @@
+// @bun
+import{SpecContractRegistry as r}from"@lssm/lib.contracts-spec/registry";var n=(t)=>`${t.key}.v${t.version}`;class i extends r{constructor(t){super("integration",t)}getByCategory(t){return this.list().filter((e)=>e.meta.category===t)}}function o(t){return n(t)}var p=(t)=>t;export{i as IntegrationSpecRegistry,p as defineIntegration,o as makeIntegrationSpecKey};

package/dist/integrations/spec.test.d.ts

@@ -0,0 +1 @@
+export {};