@opencoredev/social-sdk 0.1.2 → 0.2.0

package/dist/server/credentials.js

@@ -0,0 +1,109 @@
+import { SocialError } from "../core/errors.js";
+export class MemoryCredentialStore {
+    #values = new Map();
+    #sequence = 0;
+    async get(key) {
+        const found = this.#values.get(key);
+        if (found === undefined)
+            return undefined;
+        const value = { ...found.value };
+        if (found.value.scopes !== undefined)
+            value.scopes = [...found.value.scopes];
+        return { value, revision: found.revision };
+    }
+    async compareAndSet(input) {
+        const current = this.#values.get(input.key);
+        if ((current?.revision ?? undefined) !== input.expectedRevision)
+            return { updated: false };
+        const revision = `credential-${++this.#sequence}`;
+        const value = { ...input.value };
+        if (input.value.scopes !== undefined)
+            value.scopes = [...input.value.scopes];
+        this.#values.set(input.key, { value, revision });
+        return { updated: true, revision };
+    }
+    async delete(key) {
+        this.#values.delete(key);
+    }
+}
+export class MemoryCredentialLock {
+    #leases = new Map();
+    #sequence = 0;
+    async acquire(key, ttlMs) {
+        const current = this.#leases.get(key);
+        if (current !== undefined && Date.parse(current.expiresAt) > Date.now())
+            return undefined;
+        const lease = {
+            key,
+            token: `lease-${++this.#sequence}`,
+            expiresAt: new Date(Date.now() + ttlMs).toISOString(),
+        };
+        this.#leases.set(key, lease);
+        return lease;
+    }
+    async release(lease) {
+        if (this.#leases.get(lease.key)?.token === lease.token)
+            this.#leases.delete(lease.key);
+    }
+}
+export class CredentialManager {
+    store;
+    lock;
+    lockTtlMs;
+    constructor(store, lock, lockTtlMs = 30_000) {
+        this.store = store;
+        this.lock = lock;
+        this.lockTtlMs = lockTtlMs;
+    }
+    get(key) {
+        return this.store.get(key);
+    }
+    async save(key, value, expectedRevision) {
+        const result = await this.store.compareAndSet({ key, expectedRevision, value });
+        if (!result.updated || result.revision === undefined)
+            throw new SocialError({
+                code: "upstream_failure",
+                operation: "credentials.save",
+                message: "Credential revision changed; reload before saving",
+            });
+        return result.revision;
+    }
+    async rotate(key, refresh) {
+        const lease = await this.lock.acquire(key, this.lockTtlMs);
+        if (lease === undefined)
+            throw new SocialError({
+                code: "upstream_failure",
+                operation: "credentials.rotate",
+                message: "Another worker is already refreshing this credential",
+            });
+        try {
+            const current = await this.store.get(key);
+            if (current === undefined)
+                throw new SocialError({
+                    code: "reconnect_required",
+                    operation: "credentials.rotate",
+                    message: "No credential is stored for this account",
+                });
+            const next = await refresh(current.value);
+            const saved = await this.store.compareAndSet({
+                key,
+                expectedRevision: current.revision,
+                value: next,
+            });
+            if (!saved.updated)
+                throw new SocialError({
+                    code: "upstream_failure",
+                    operation: "credentials.rotate",
+                    message: "Credential changed while refreshing; do not repeat the provider request blindly",
+                });
+            return next;
+        }
+        finally {
+            await this.lock.release(lease);
+        }
+    }
+    delete(key) {
+        return this.store.delete(key);
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/server/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/server/credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBhD,MAAM,OAAO,qBAAqB;IACvB,OAAO,GAAG,IAAI,GAAG,EAAyD,CAAC;IACpF,SAAS,GAAG,CAAC,CAAC;IAEd,KAAK,CAAC,GAAG,CACP,GAAW;QAEX,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAEjC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAInB;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC,gBAAgB;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3F,MAAM,QAAQ,GAAG,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAEjC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IACtB,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,SAAS,GAAG,CAAC,CAAC;IAEd,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,KAAa;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,SAAS,CAAC;QAE1F,MAAM,KAAK,GAAG;YACZ,GAAG;YACH,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;YAClC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;SACtD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAsB;QAClC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzF,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IAHnB,YACmB,KAAwC,EACxC,IAAoB,EACpB,YAAY,MAAM;QAFlB,UAAK,GAAL,KAAK,CAAmC;QACxC,SAAI,GAAJ,IAAI,CAAgB;QACpB,cAAS,GAAT,SAAS,CAAS;IAClC,CAAC;IAEJ,GAAG,CACD,GAAW;QAEX,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,KAAuB,EAAE,gBAAyB;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAClD,MAAM,IAAI,WAAW,CAAC;gBACpB,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QAEL,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAW,EACX,OAAiE;QAEjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,WAAW,CAAC;gBACpB,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE1C,IAAI,OAAO,KAAK,SAAS;gBACvB,MAAM,IAAI,WAAW,CAAC;oBACpB,IAAI,EAAE,oBAAoB;oBAC1B,SAAS,EAAE,oBAAoB;oBAC/B,OAAO,EAAE,0CAA0C;iBACpD,CAAC,CAAC;YACL,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAE1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC3C,GAAG;gBACH,gBAAgB,EAAE,OAAO,CAAC,QAAQ;gBAClC,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,OAAO;gBAChB,MAAM,IAAI,WAAW,CAAC;oBACpB,IAAI,EAAE,kBAAkB;oBACxB,SAAS,EAAE,oBAAoB;oBAC/B,OAAO,EACL,iFAAiF;iBACpF,CAAC,CAAC;YAEL,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/server/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./connections.js";
+export * from "./credentials.js";
+export * from "./webhooks.js";
+export * from "./oauth.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,eAAe,CAAC;AAE9B,cAAc,YAAY,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,5 @@
+export * from "./connections.js";
+export * from "./credentials.js";
+export * from "./webhooks.js";
+export * from "./oauth.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,eAAe,CAAC;AAE9B,cAAc,YAAY,CAAC"}

package/dist/server/oauth.d.ts

@@ -0,0 +1,53 @@
+import type { ConnectionAccount, ConnectionAttempt, ConnectionProvider } from "./connections.js";
+export interface OAuthTokenSet {
+    readonly accessToken: string;
+    readonly refreshToken?: string;
+    readonly expiresAt?: string;
+    readonly scopes?: readonly string[];
+    readonly tokenType?: string;
+}
+export interface OAuthCredentialSink {
+    save(input: {
+        readonly account: ConnectionAccount;
+        readonly token: OAuthTokenSet;
+        readonly attempt: ConnectionAttempt;
+    }): Promise<void>;
+}
+export interface OAuthProviderOptions {
+    readonly clientId: string;
+    readonly clientSecret?: string;
+    readonly redirectUri?: string;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly credentialSink?: OAuthCredentialSink;
+    /**
+     * Selects which validated discovered accounts receive persisted credentials.
+     * When omitted, credentials are persisted for every discovered account.
+     */
+    readonly selectAccounts?: (accounts: readonly ConnectionAccount[], attempt: ConnectionAttempt) => readonly string[] | Promise<readonly string[]>;
+    /** Optional label for callers; the attempt's backend is always authoritative. */
+    readonly backend?: string;
+    readonly scopes?: readonly string[];
+    /** Explicit LinkedIn Marketing API version (YYYYMM). Required for LinkedIn OAuth. */
+    readonly linkedinApiVersion?: string;
+    /** Graph API version for Threads account discovery. */
+    readonly threadsApiVersion?: string;
+    /** Graph API version for Instagram Login account discovery. */
+    readonly instagramApiVersion?: string;
+    /** Maximum time for a single OAuth request. Defaults to ten seconds. */
+    readonly timeoutMs?: number;
+    /** Maximum response body size. Defaults to one MiB. */
+    readonly maxResponseBytes?: number;
+}
+type ProviderKind = "youtube" | "x" | "threads" | "tiktok" | "instagram" | "linkedin";
+export declare function oauthProvider(kind: ProviderKind, options: OAuthProviderOptions): ConnectionProvider;
+/** Exchange a short-lived Threads or Instagram Login token for a long-lived token. */
+export declare function exchangeLongLivedOAuthToken(kind: "threads" | "instagram", options: OAuthProviderOptions, current: OAuthTokenSet): Promise<OAuthTokenSet>;
+export declare const youtubeOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare const xOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare const threadsOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare const tiktokOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare const instagramOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare const linkedinOAuth: (options: OAuthProviderOptions) => ConnectionProvider;
+export declare function refreshOAuthToken(kind: ProviderKind, options: OAuthProviderOptions, current: OAuthTokenSet): Promise<OAuthTokenSet>;
+export {};
+//# sourceMappingURL=oauth.d.ts.map

package/dist/server/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/server/oauth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEjG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,KAAK,EAAE;QACV,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CACxB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,OAAO,EAAE,iBAAiB,KACvB,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACpD,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,qFAAqF;IACrF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,uDAAuD;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,+DAA+D;IAC/D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,KAAK,YAAY,GAAG,SAAS,GAAG,GAAG,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAietF,wBAAgB,aAAa,CAC3B,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,oBAAoB,GAC5B,kBAAkB,CAwJpB;AAgPD,sFAAsF;AACtF,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,SAAS,GAAG,WAAW,EAC7B,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,eAAO,MAAM,YAAY,GAAI,SAAS,oBAAoB,uBAAsC,CAAC;AAEjG,eAAO,MAAM,MAAM,GAAI,SAAS,oBAAoB,uBAAgC,CAAC;AAErF,eAAO,MAAM,YAAY,GAAI,SAAS,oBAAoB,uBAAsC,CAAC;AAEjG,eAAO,MAAM,WAAW,GAAI,SAAS,oBAAoB,uBAAqC,CAAC;AAE/F,eAAO,MAAM,cAAc,GAAI,SAAS,oBAAoB,uBACvB,CAAC;AAEtC,eAAO,MAAM,aAAa,GAAI,SAAS,oBAAoB,uBAAuC,CAAC;AAEnG,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,aAAa,CAAC,CAmExB"}