@nextsparkjs/plugin-social-media-publisher 0.1.0-beta.68 → 0.1.0-beta.72

package/.env.example

@@ -1,16 +1,17 @@
-# ============================================================================
-# SOCIAL MEDIA PUBLISHER PLUGIN - ENVIRONMENT VARIABLES
-# ============================================================================
+# ============================================
+# SOCIAL MEDIA PUBLISHER PLUGIN CONFIGURATION
+# ============================================
 #
-# Copy this file to .env and fill in your actual values
+# Copy this file to .env and configure your social media credentials
+# This file is loaded automatically by the Social Media Publisher plugin
 #
-# ⚠️  NEVER commit .env to git - it contains secrets!
+# Priority: Plugin .env > Root .env > Defaults
 #
-# ============================================================================
+# ============================================
 
-# ============================================================================
-# FACEBOOK/META OAUTH (Required for Instagram Business & Facebook Pages)
-# ============================================================================
+# ===========================
+# Facebook/Meta OAuth
+# ===========================
 # Get from: https://developers.facebook.com/apps/
 # App Dashboard → Settings → Basic → App ID & App Secret
 #
@@ -23,54 +24,53 @@
 # - instagram_basic
 # - instagram_content_publish
 # - instagram_manage_comments
-#
-# Redirect URI: [YOUR_APP_URL]/api/v1/plugin/social-media-publisher/social/connect/callback
-# Example: https://yourdomain.com/api/v1/plugin/social-media-publisher/social/connect/callback
 
-FACEBOOK_CLIENT_ID="your-facebook-app-id"
-FACEBOOK_CLIENT_SECRET="your-facebook-app-secret"
+# Facebook App ID
+FACEBOOK_CLIENT_ID=your-facebook-app-id
+
+# Facebook App Secret
+FACEBOOK_CLIENT_SECRET=your-facebook-app-secret
 
-# Alternative names (both are supported):
-# FACEBOOK_APP_ID="your-facebook-app-id"
-# FACEBOOK_APP_SECRET="your-facebook-app-secret"
+# ===========================
+# OAuth Token Encryption
+# ===========================
+# Required for secure storage of OAuth tokens
+# Generate with: openssl rand -hex 32
+# Or: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 
-# ============================================================================
-# CRON JOB AUTHENTICATION (Required for scheduled publishing)
-# ============================================================================
-# Secret key to authenticate cron job requests
+OAUTH_ENCRYPTION_KEY=your-32-byte-hex-encryption-key
+
+# ===========================
+# Cron Job Authentication
+# ===========================
+# Secret key to authenticate scheduled publishing requests
 # Generate with: openssl rand -base64 32
 #
-# This is used by the scheduled publishing endpoint:
-# POST /api/v1/cron/publish-scheduled
+# Used by: POST /api/v1/cron/publish-scheduled
 # Header: Authorization: Bearer <CRON_SECRET>
-#
-# Configure in your cron service (Vercel Cron, GitHub Actions, etc.)
 
-CRON_SECRET="your-cron-secret-key-here"
+CRON_SECRET=your-cron-secret-key-here
 
-# ============================================================================
-# USAGE NOTES
-# ============================================================================
+# ===========================
+# Quick Setup Guide
+# ===========================
 #
-# 1. Copy this file:
-#    cp .env.example .env
-#
-# 2. Create Facebook App:
+# 1. Create Facebook App:
 #    - Go to https://developers.facebook.com/apps/
 #    - Create new app → Type: Business
 #    - Add Facebook Login & Instagram API products
-#    - Configure OAuth Redirect URIs
-#    - Copy App ID & App Secret to this file
 #
-# 3. Generate CRON_SECRET:
+# 2. Configure OAuth Redirect URI:
+#    [YOUR_APP_URL]/api/v1/plugin/social-media-publisher/social/connect/callback
+#
+# 3. Generate encryption key:
+#    openssl rand -hex 32
+#
+# 4. Generate cron secret:
 #    openssl rand -base64 32
 #
-# 4. Configure Vercel Cron (see vercel.json):
+# 5. For Vercel Cron (see vercel.json):
 #    - Add CRON_SECRET to Vercel Environment Variables
 #    - Cron runs every 5 minutes by default
 #
-# 5. Test scheduled publishing:
-#    curl -X POST http://localhost:5173/api/v1/cron/publish-scheduled \
-#      -H "Authorization: Bearer YOUR_CRON_SECRET"
-#
-# ============================================================================
+# ⚠️  NEVER commit .env to git - it contains secrets!

package/README.md

@@ -251,6 +251,46 @@ async function publishToInstagram(account: any, imageUrl: string, caption: strin
 
 ## Environment Variables
 
+### ⭐ Plugin-Level Environment Configuration (Recommended)
+
+The Social Media Publisher plugin supports **plugin-level `.env` files** that take priority over root environment variables.
+
+#### Setup
+
+1. **Copy the example file:**
+   ```bash
+   cp contents/plugins/social-media-publisher/.env.example contents/plugins/social-media-publisher/.env
+   ```
+
+2. **Configure your credentials:**
+   ```env
+   # Facebook/Meta OAuth
+   FACEBOOK_CLIENT_ID="your-facebook-app-id"
+   FACEBOOK_CLIENT_SECRET="your-facebook-app-secret"
+
+   # Cron Job Authentication
+   CRON_SECRET="your-cron-secret-key-here"
+   ```
+
+#### Priority System
+
+The plugin environment loader uses this priority:
+
+1. **Plugin `.env`** (`contents/plugins/social-media-publisher/.env`) - Highest priority
+2. **Root `.env`** (`/.env`) - Fallback for variables not in plugin .env
+3. **Built-in defaults** - Lowest priority
+
+#### Benefits
+
+- ✅ **Isolation**: OAuth credentials isolated to the plugin
+- ✅ **Security**: Sensitive keys scoped to specific plugins
+- ✅ **Modularity**: Each plugin manages its own secrets
+- ✅ **Flexibility**: Different configs per environment
+
+### Root Environment Variables (Alternative)
+
+You can also configure credentials in the root `.env`:
+
 ```env
 # Facebook App Credentials (same as Better Auth)
 FACEBOOK_CLIENT_ID=your_app_id

package/lib/plugin-env.ts

@@ -0,0 +1,164 @@
+/**
+ * Social Media Publisher Plugin Environment Configuration (Server-Only)
+ *
+ * Uses centralized plugin environment loader from core
+ * Provides type-safe access to OAuth and publishing configuration
+ */
+
+import { getPluginEnv } from '@nextsparkjs/core/lib/plugins/env-loader'
+
+interface SocialMediaPublisherEnvConfig {
+  // Facebook/Meta OAuth
+  FACEBOOK_CLIENT_ID?: string
+  FACEBOOK_CLIENT_SECRET?: string
+  FACEBOOK_APP_ID?: string // Alternative name
+  FACEBOOK_APP_SECRET?: string // Alternative name
+
+  // OAuth Encryption
+  OAUTH_ENCRYPTION_KEY?: string
+
+  // Cron Job Authentication
+  CRON_SECRET?: string
+
+  // App URL
+  NEXT_PUBLIC_APP_URL?: string
+}
+
+class PluginEnvironment {
+  private static instance: PluginEnvironment
+  private config: SocialMediaPublisherEnvConfig = {}
+  private loaded = false
+
+  private constructor() {
+    this.loadEnvironment()
+  }
+
+  public static getInstance(): PluginEnvironment {
+    if (!PluginEnvironment.instance) {
+      PluginEnvironment.instance = new PluginEnvironment()
+    }
+    return PluginEnvironment.instance
+  }
+
+  private loadEnvironment(forceReload: boolean = false): void {
+    if (this.loaded && !forceReload) return
+
+    try {
+      // Use centralized plugin env loader
+      const env = getPluginEnv('social-media-publisher')
+
+      this.config = {
+        // Facebook/Meta OAuth (support both naming conventions)
+        FACEBOOK_CLIENT_ID: env.FACEBOOK_CLIENT_ID || env.FACEBOOK_APP_ID,
+        FACEBOOK_CLIENT_SECRET: env.FACEBOOK_CLIENT_SECRET || env.FACEBOOK_APP_SECRET,
+        FACEBOOK_APP_ID: env.FACEBOOK_APP_ID || env.FACEBOOK_CLIENT_ID,
+        FACEBOOK_APP_SECRET: env.FACEBOOK_APP_SECRET || env.FACEBOOK_CLIENT_SECRET,
+
+        // OAuth Encryption
+        OAUTH_ENCRYPTION_KEY: env.OAUTH_ENCRYPTION_KEY,
+
+        // Cron Job Authentication
+        CRON_SECRET: env.CRON_SECRET,
+
+        // App URL
+        NEXT_PUBLIC_APP_URL: env.NEXT_PUBLIC_APP_URL,
+      }
+
+      this.logLoadedConfiguration()
+      this.loaded = true
+    } catch (error) {
+      console.error('[Social Media Publisher] Failed to load environment:', error)
+      this.loaded = true
+    }
+  }
+
+  private logLoadedConfiguration(): void {
+    if (process.env.NODE_ENV === 'development') {
+      console.log('[Social Media Publisher] Environment Configuration:')
+      console.log('  → Facebook/Meta OAuth:')
+      console.log(`    - FACEBOOK_CLIENT_ID: ${this.config.FACEBOOK_CLIENT_ID ? '✓ set' : '✗ not set'}`)
+      console.log(`    - FACEBOOK_CLIENT_SECRET: ${this.config.FACEBOOK_CLIENT_SECRET ? '✓ set' : '✗ not set'}`)
+      console.log('  → OAuth Encryption:')
+      console.log(`    - OAUTH_ENCRYPTION_KEY: ${this.config.OAUTH_ENCRYPTION_KEY ? '✓ set' : '✗ not set'}`)
+      console.log('  → Cron Authentication:')
+      console.log(`    - CRON_SECRET: ${this.config.CRON_SECRET ? '✓ set' : '✗ not set'}`)
+      console.log('  → App Configuration:')
+      console.log(`    - NEXT_PUBLIC_APP_URL: ${this.config.NEXT_PUBLIC_APP_URL || 'not set'}`)
+      console.log()
+    }
+  }
+
+  public getConfig(): SocialMediaPublisherEnvConfig {
+    if (!this.loaded) {
+      this.loadEnvironment()
+    }
+    return this.config
+  }
+
+  // Helper methods
+  public getFacebookClientId(): string | undefined {
+    return this.getConfig().FACEBOOK_CLIENT_ID
+  }
+
+  public getFacebookClientSecret(): string | undefined {
+    return this.getConfig().FACEBOOK_CLIENT_SECRET
+  }
+
+  public getOAuthEncryptionKey(): string | undefined {
+    return this.getConfig().OAUTH_ENCRYPTION_KEY
+  }
+
+  public getCronSecret(): string | undefined {
+    return this.getConfig().CRON_SECRET
+  }
+
+  public getAppUrl(): string | undefined {
+    return this.getConfig().NEXT_PUBLIC_APP_URL
+  }
+
+  public hasFacebookCredentials(): boolean {
+    const config = this.getConfig()
+    return !!(config.FACEBOOK_CLIENT_ID && config.FACEBOOK_CLIENT_SECRET)
+  }
+
+  public hasOAuthEncryption(): boolean {
+    return !!this.getConfig().OAUTH_ENCRYPTION_KEY
+  }
+
+  public validateEnvironment(): { valid: boolean; errors: string[] } {
+    const errors: string[] = []
+    const config = this.getConfig()
+
+    if (!config.FACEBOOK_CLIENT_ID) {
+      errors.push('FACEBOOK_CLIENT_ID is required for OAuth')
+    }
+    if (!config.FACEBOOK_CLIENT_SECRET) {
+      errors.push('FACEBOOK_CLIENT_SECRET is required for OAuth')
+    }
+    if (!config.OAUTH_ENCRYPTION_KEY) {
+      errors.push('OAUTH_ENCRYPTION_KEY is required for token encryption')
+    }
+
+    return {
+      valid: errors.length === 0,
+      errors,
+    }
+  }
+
+  public reload(): void {
+    this.loaded = false
+    this.loadEnvironment(true)
+  }
+}
+
+export const pluginEnv = PluginEnvironment.getInstance()
+
+// Convenience exports
+export const getFacebookClientId = () => pluginEnv.getFacebookClientId()
+export const getFacebookClientSecret = () => pluginEnv.getFacebookClientSecret()
+export const getOAuthEncryptionKey = () => pluginEnv.getOAuthEncryptionKey()
+export const getCronSecret = () => pluginEnv.getCronSecret()
+export const getAppUrl = () => pluginEnv.getAppUrl()
+export const hasFacebookCredentials = () => pluginEnv.hasFacebookCredentials()
+export const hasOAuthEncryption = () => pluginEnv.hasOAuthEncryption()
+export const validateEnvironment = () => pluginEnv.validateEnvironment()

package/package.json

@@ -1,19 +1,19 @@
 {
   "name": "@nextsparkjs/plugin-social-media-publisher",
-  "version": "0.1.0-beta.68",
+  "version": "0.1.0-beta.72",
   "private": false,
   "main": "./plugin.config.ts",
   "requiredPlugins": [],
   "dependencies": {},
   "peerDependencies": {
+    "@nextsparkjs/core": "workspace:*",
     "next": "^15.0.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "zod": "^4.0.0",
-    "@nextsparkjs/core": "0.1.0-beta.68"
+    "zod": "^4.0.0"
   },
   "nextspark": {
     "type": "plugin",
     "name": "social-media-publisher"
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 NextSpark
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.