@opencoredev/social-sdk 0.3.0 → 0.5.0

package/dist/platforms/bluesky.js

@@ -1,14 +1,19 @@
-/* oxlint-disable anti-slop/no-chained-type-assertions, anti-slop/no-known-value-widening, anti-slop/require-safety-comment-for-type-assertion, anti-slop/require-readable-spacing, anti-slop/no-conditional-empty-object-spread, anti-slop/no-runtime-typeof -- validated external boundary or fixture contract. */
 import { readBinary } from "../transport/binary.js";
 import { remainingBudget } from "../transport/budget.js";
 import { connectedAccountRef, defineAdapter, platformPostRef, profileRef, } from "../core/index.js";
 import { SocialError } from "../core/errors.js";
+import { definedFields } from "../core/fields.js";
 import { abortable, createHttp, HttpError } from "../transport/http.js";
 import { httpsUrl } from "../transport/upload.js";
-import { array, object, string } from "../transport/validation.js";
+import { array, isBoolean, isFiniteNumber, isString, object, optionalNumber, optionalString, string, } from "../transport/validation.js";
 import { publicFields } from "../cloud/common.js";
 const MAX_IMAGE_BYTES = 10 * 1024 * 1024;
 const MAX_IMAGES = 4;
+/** app.bsky.embed.video accepts one MP4 blob of at most 300,000,000 bytes. */
+const MAX_VIDEO_BYTES = 300_000_000;
+const DEFAULT_VIDEO_SERVICE = "https://video.bsky.app";
+/** Bluesky's video guide recommends a 30 minute upload token lifetime. */
+const VIDEO_UPLOAD_TOKEN_SECONDS = 30 * 60;
 function endpoint(service, method) {
     let base;
     try {
@@ -36,11 +41,11 @@ function accountMatches(ref, auth, backend) {
 function authHeaders(auth) {
     return auth.accessJwt === undefined ? {} : { Authorization: `Bearer ${auth.accessJwt}` };
 }
-// oxlint-disable-next-line anti-slop/no-unknown-parameters -- validated boundary or fixture contract.
-function operationError(operation, error, mutation = true) {
-    if (error instanceof SocialError)
-        return error;
-    if (error instanceof HttpError) {
+function operationError(operation, cause, mutation = true) {
+    if (cause instanceof SocialError)
+        return cause;
+    if (cause instanceof HttpError) {
+        const error = cause;
         const ambiguous = mutation &&
             error.dispatched &&
             (error.kind !== "http" || (error.status !== undefined && error.status >= 500));
@@ -72,8 +77,7 @@ function operationError(operation, error, mutation = true) {
                         : !mutation && error.status !== undefined && error.status >= 500
                             ? { kind: "after-delay", delayMs: 1000 }
                             : { kind: "never" },
-            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-            ...(error.status === undefined ? {} : { upstreamStatus: error.status }),
+            ...definedFields({ upstreamStatus: error.status }),
         });
     }
     return new SocialError({
@@ -81,14 +85,90 @@ function operationError(operation, error, mutation = true) {
         operation,
         message: "Bluesky request failed.",
         retryDisposition: { kind: "reconcile-first" },
-        cause: error,
+        cause,
     });
 }
-// oxlint-disable-next-line anti-slop/no-unknown-parameters -- validated boundary or fixture contract.
 function postRef(value) {
     const record = object(value);
     return { uri: string(record["uri"]), cid: string(record["cid"]) };
 }
+function videoServiceOrigin(value) {
+    let url;
+    try {
+        url = new URL(value ?? DEFAULT_VIDEO_SERVICE);
+    }
+    catch {
+        throw new SocialError({
+            code: "invalid_config",
+            operation: "bluesky.configure",
+            message: "Bluesky video service must be an absolute URL.",
+        });
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.pathname !== "/")
+        throw new SocialError({
+            code: "invalid_config",
+            operation: "bluesky.configure",
+            message: "Bluesky video service must be an HTTPS origin without credentials or a path.",
+        });
+    return url;
+}
+function serviceDid(value, operation) {
+    if (!/^did:[a-z]+:[A-Za-z0-9._:%-]{1,2000}$/.test(value))
+        throw new SocialError({
+            code: "invalid_config",
+            operation,
+            message: "Bluesky PDS service DID is malformed.",
+        });
+    return value;
+}
+/** Validates a processed video blob before it is written into a post record. */
+function videoBlob(value) {
+    const blob = object(value);
+    const link = object(blob["ref"])["$link"];
+    const size = blob["size"];
+    if (blob["$type"] !== "blob" ||
+        !isString(link) ||
+        !/^[a-z0-9]{8,128}$/i.test(link) ||
+        blob["mimeType"] !== "video/mp4" ||
+        !isFiniteNumber(size) ||
+        !Number.isSafeInteger(size) ||
+        size <= 0 ||
+        size > MAX_VIDEO_BYTES)
+        throw new SocialError({
+            code: "media_error",
+            operation: "bluesky.video.job",
+            message: "Bluesky returned a video blob that cannot be embedded.",
+            retryDisposition: { kind: "never" },
+        });
+    return { $type: "blob", ref: { $link: link }, mimeType: "video/mp4", size };
+}
+/** Parses app.bsky.video.defs#jobStatus and binds it to the configured DID. */
+function videoJob(value, did) {
+    const job = object(value);
+    const owner = string(job["did"]);
+    if (owner !== did)
+        throw new SocialError({
+            code: "unauthorized",
+            operation: "bluesky.video.job",
+            message: "Bluesky video job belongs to a different DID.",
+        });
+    const progress = optionalNumber(job["progress"]);
+    const failureCode = optionalString(job["failureCode"]);
+    const error = optionalString(job["error"]);
+    const message = optionalString(job["message"]);
+    return {
+        jobId: string(job["jobId"]),
+        did: owner,
+        state: string(job["state"]),
+        ...definedFields({
+            progress,
+            blob: job["blob"] === undefined ? undefined : videoBlob(job["blob"]),
+            failureCode,
+            error,
+            message,
+        }),
+    };
+}
 function linkFacets(text) {
     const facets = [];
     const urlPattern = /https?:\/\/[^\s<>]+/g;
@@ -107,111 +187,91 @@ function linkFacets(text) {
     }
     return facets;
 }
-// oxlint-disable-next-line anti-slop/no-unknown-parameters -- validated boundary or fixture contract.
-function richTextOptions(text, options) {
-    const invalid = (message) => {
-        throw new SocialError({ code: "invalid_input", operation: "bluesky.prepare", message });
-    };
-    if (options !== undefined &&
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        (options === null || typeof options !== "object" || Array.isArray(options)))
-        invalid("Bluesky options must be an object.");
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-    const config = (options ?? {});
+function invalidRichText(message) {
+    throw new SocialError({ code: "invalid_input", operation: "bluesky.prepare", message });
+}
+/** Caller-supplied publish options arrive untyped; this only admits non-array objects. */
+function isOptionBag(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isOptionList(value) {
+    return Array.isArray(value);
+}
+function isStringItem(value) {
+    return typeof value === "string";
+}
+function isStringList(value) {
+    return Array.isArray(value) && value.every(isStringItem);
+}
+function hasMentionFields(value) {
+    return (isOptionBag(value) &&
+        "byteStart" in value &&
+        "byteEnd" in value &&
+        "did" in value &&
+        typeof value.byteStart === "number" &&
+        typeof value.byteEnd === "number" &&
+        typeof value.did === "string");
+}
+function isJsonBody(body) {
+    return typeof body === "string";
+}
+function richTextOptions(text, target) {
+    const options = target.options;
+    if (options !== undefined && !isOptionBag(options))
+        invalidRichText("Bluesky options must be an object.");
+    const config = options ?? {};
     if (Object.keys(config).some((key) => key !== "languages" && key !== "mentions"))
-        invalid("A supplied Bluesky option is not supported.");
+        invalidRichText("A supplied Bluesky option is not supported.");
     let langs;
-    if (config["languages"] !== undefined) {
-        const languages = config["languages"];
-        if (!Array.isArray(languages) ||
-            languages.length > 3 ||
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            languages.some((value) => typeof value !== "string"))
-            invalid("Bluesky accepts at most three language tags.");
+    const languages = "languages" in config ? config.languages : undefined;
+    if (languages !== undefined) {
+        if (!isStringList(languages) || languages.length > 3)
+            invalidRichText("Bluesky accepts at most three language tags.");
         try {
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            langs = Intl.getCanonicalLocales(languages);
+            langs = Intl.getCanonicalLocales([...languages]);
         }
         catch {
-            invalid("Bluesky languages must be valid BCP 47 tags.");
+            invalidRichText("Bluesky languages must be valid BCP 47 tags.");
         }
     }
-    const facets = [...linkFacets(text)];
+    const facets = linkFacets(text);
     const bytes = new TextEncoder().encode(text);
-    const mentions = config["mentions"] ?? [];
-    if (!Array.isArray(mentions) || mentions.length > 100)
-        invalid("Bluesky mentions must be an array of at most 100 DID references.");
+    const mentions = ("mentions" in config ? config.mentions : undefined) ?? [];
+    if (!isOptionList(mentions) || mentions.length > 100)
+        invalidRichText("Bluesky mentions must be an array of at most 100 DID references.");
     const spans = [];
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
     for (const value of mentions) {
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        if (!value || typeof value !== "object" || Array.isArray(value))
-            invalid("Each mention requires UTF-8 offsets and a DID.");
-        const start = value["byteStart"], end = value["byteEnd"], did = value["did"];
-        if (
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        typeof start !== "number" ||
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            typeof end !== "number" ||
-            !Number.isSafeInteger(start) ||
-            !Number.isSafeInteger(end) ||
-            start < 0 ||
-            end <= start ||
-            end > bytes.length ||
-            (bytes[start] & 0xc0) === 0x80 ||
-            (end < bytes.length && (bytes[end] & 0xc0) === 0x80) ||
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            typeof did !== "string" ||
-            !/^did:[a-z]+:[A-Za-z0-9._:%-]+$/.test(did))
-            invalid("Mention offsets must span complete UTF-8 characters and identify a DID.");
-        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-        const byteStart = start, 
-        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-        byteEnd = end;
+        if (!isOptionBag(value))
+            invalidRichText("Each mention requires UTF-8 offsets and a DID.");
+        if (!hasMentionFields(value) ||
+            !Number.isSafeInteger(value.byteStart) ||
+            !Number.isSafeInteger(value.byteEnd) ||
+            value.byteStart < 0 ||
+            value.byteEnd <= value.byteStart ||
+            value.byteEnd > bytes.length ||
+            (bytes[value.byteStart] & 0xc0) === 0x80 ||
+            (value.byteEnd < bytes.length && (bytes[value.byteEnd] & 0xc0) === 0x80) ||
+            !/^did:[a-z]+:[A-Za-z0-9._:%-]+$/.test(value.did))
+            invalidRichText("Mention offsets must span complete UTF-8 characters and identify a DID.");
+        const { byteStart, byteEnd, did } = value;
         if (!new TextDecoder().decode(bytes.slice(byteStart, byteEnd)).startsWith("@"))
-            invalid("A mention span must start with @.");
+            invalidRichText("A mention span must start with @.");
         if (spans.some((span) => byteStart < span.end && byteEnd > span.start) ||
-            facets.some((facet) => {
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                const index = facet["index"];
-                return byteStart < Number(index["byteEnd"]) && byteEnd > Number(index["byteStart"]);
-            }))
-            invalid("Mention spans must not overlap links or other mentions.");
+            facets.some((facet) => byteStart < facet.index.byteEnd && byteEnd > facet.index.byteStart))
+            invalidRichText("Mention spans must not overlap links or other mentions.");
         spans.push({ start: byteStart, end: byteEnd });
         facets.push({
             index: { byteStart, byteEnd },
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-            features: [{ $type: "app.bsky.richtext.facet#mention", did: did }],
+            features: [{ $type: "app.bsky.richtext.facet#mention", did }],
         });
     }
-    facets.sort((left, right) => 
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-    Number(left["index"]["byteStart"]) -
-        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-        Number(right["index"]["byteStart"]));
-    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-    return { ...(langs === undefined ? {} : { langs }), ...(facets.length ? { facets } : {}) };
+    facets.sort((left, right) => left.index.byteStart - right.index.byteStart);
+    return definedFields({ langs, facets: facets.length ? facets : undefined });
 }
 function graphemeCount(text) {
-    const Segmenter = 
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- provider payload is validated at this adapter boundary.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- provider payload is validated at this adapter boundary.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/no-chained-type-assertions -- validated external boundary or fixture contract.
-    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated external boundary or fixture contract.
-    Intl.Segmenter;
-    return Segmenter === undefined
+    return Intl.Segmenter === undefined
         ? Array.from(text).length
-        : [...new Segmenter(undefined, { granularity: "grapheme" }).segment(text)].length;
+        : [...new Intl.Segmenter(undefined, { granularity: "grapheme" }).segment(text)].length;
 }
 async function readMedia(source, fetcher, context, allowMediaHost) {
     const duration = remainingBudget(context);
@@ -303,8 +363,7 @@ export function bluesky(options) {
                 return options.session.fetchHandler(url.pathname + url.search, init);
             }
             : fetcher,
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        ...(options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs }),
+        ...definedFields({ timeoutMs: options.timeoutMs }),
     });
     const auth = options.auth;
     if (options.session) {
@@ -336,6 +395,12 @@ export function bluesky(options) {
         apiRevision: "AT Protocol XRPC 2026-09",
         runtime: ["node>=22.12", "bun"],
         capabilities: [
+            {
+                operation: "webhooks.verify",
+                platform: "bluesky",
+                availability: "unsupported-by-platform",
+                notes: "Bluesky has no signed webhook delivery. Events arrive over WebSocket streams you subscribe to: the relay firehose (com.atproto.sync.subscribeRepos) or Jetstream. See https://bsky.network/docs/consuming-the-firehose.",
+            },
             {
                 operation: "accounts.read",
                 platform: "bluesky",
@@ -346,9 +411,15 @@ export function bluesky(options) {
                 operation: "posts.publish",
                 platform: "bluesky",
                 availability: "available",
-                formats: ["text", "image"],
+                formats: ["text", "image", "video"],
                 requiredScopes: ["repo"],
             },
+            {
+                operation: "posts.schedule",
+                platform: "bluesky",
+                availability: "unsupported-by-platform",
+                notes: "AT Protocol records are visible once written. The post createdAt field is a client-declared timestamp and does not delay publication.",
+            },
             {
                 operation: "posts.read",
                 platform: "bluesky",
@@ -404,9 +475,54 @@ export function bluesky(options) {
             {
                 operation: "posts.publish.video",
                 platform: "bluesky",
-                availability: "not-implemented-by-adapter",
+                availability: "available",
                 formats: ["video"],
                 requiredScopes: ["repo"],
+                notes: "One MP4 per post from a media.upload reference. Publishing reads the video job once and creates the post only when the processed blob is ready; it never waits or polls.",
+            },
+            {
+                operation: "comments.moderate",
+                platform: "bluesky",
+                availability: "available",
+                requiredScopes: ["repo"],
+                notes: "Native hideReply adds or removes a reply URI in the root post's threadgate hiddenReplies list. Only the root post's author can hide replies.",
+            },
+            {
+                operation: "media.upload",
+                platform: "bluesky",
+                availability: "available",
+                formats: ["video"],
+                requiredScopes: ["repo"],
+                notes: "Uploads one video/mp4 Blob of at most 300,000,000 bytes to the Bluesky video service with a PDS service token. Returns the processing job ID as the media reference.",
+            },
+            {
+                operation: "media.video",
+                platform: "bluesky",
+                availability: "available",
+                formats: ["video"],
+                requiredScopes: ["repo"],
+                notes: "native.uploadVideo sends one app.bsky.video.uploadVideo request and returns the job.",
+            },
+            {
+                operation: "media.status",
+                platform: "bluesky",
+                availability: "available",
+                formats: ["video"],
+                notes: "native.getVideoJobStatus reads app.bsky.video.getJobStatus once per call.",
+            },
+            {
+                operation: "media.limits.read",
+                platform: "bluesky",
+                availability: "available",
+                formats: ["video"],
+                notes: "native.getVideoUploadLimits reads the daily video allowance. Uploads do not check it automatically.",
+            },
+            // Source, accessed 2026-09-24: https://github.com/bluesky-social/atproto/discussions/3038
+            {
+                operation: "posts.update",
+                platform: "bluesky",
+                availability: "unsupported-by-platform",
+                notes: "Bluesky treats posts as immutable. A putRecord rewrite succeeds on the PDS, but the Bluesky AppView ignores post updates and the new CID breaks existing strong references from replies, quotes, likes, and reposts.",
             },
             ...[
                 "posts.repost",
@@ -434,7 +550,7 @@ export function bluesky(options) {
     async function xrpc(method, context, init = {}) {
         try {
             const headers = new Headers(init.headers);
-            if (typeof init.body === "string" && !headers.has("Content-Type"))
+            if (isJsonBody(init.body) && !headers.has("Content-Type"))
                 headers.set("Content-Type", "application/json");
             if (method.startsWith("chat.bsky.") && !headers.has("atproto-proxy"))
                 headers.set("atproto-proxy", "did:web:api.bsky.chat#bsky_chat");
@@ -445,10 +561,7 @@ export function bluesky(options) {
                 ...(options.session
                     ? { headers }
                     : { headers: { ...authHeaders(auth), ...Object.fromEntries(headers.entries()) } }),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(init.body === undefined ? {} : { body: init.body }),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(context.signal === undefined ? {} : { signal: context.signal }),
+                ...definedFields({ body: init.body, signal: context.signal }),
                 maxAttempts: init.maxAttempts ??
                     (init.body === undefined ? Math.min(context.retryBudget.maxAttempts, 3) : 1),
             });
@@ -469,10 +582,102 @@ export function bluesky(options) {
                 message: "The configured credential belongs to a different DID.",
             });
         }
-        // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-        const handle = typeof session["handle"] === "string" ? session["handle"] : undefined;
-        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-        return { did, ...(handle === undefined ? {} : { handle }) };
+        return { did, ...definedFields({ handle: optionalString(session["handle"]) }) };
+    }
+    const videoOrigin = videoServiceOrigin(options.videoService);
+    const timeout = options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs };
+    const videoHttp = createHttp({ fetch: fetcher, ...timeout });
+    // Bluesky's video guide notes that a video the service already processed is reported as
+    // `already_exists` together with the existing job and blob. The upload transport reads that
+    // 409 body as a job status; `videoJob` still validates it and binds it to this DID.
+    const videoUploadHttp = createHttp({
+        fetch: async (input, init) => {
+            const response = await fetcher(input, init);
+            return response.status === 409
+                ? new Response(response.body, { status: 200, headers: response.headers })
+                : response;
+        },
+        ...timeout,
+    });
+    async function videoRequest(method, query, context, init = {}) {
+        const url = new URL(`/xrpc/${method}`, videoOrigin);
+        url.search = query.toString();
+        try {
+            return await (init.body === undefined ? videoHttp : videoUploadHttp)({
+                url,
+                timeoutMs: remainingBudget(context),
+                method: init.body === undefined ? "GET" : "POST",
+                headers: definedFields({
+                    Authorization: init.token === undefined ? undefined : `Bearer ${init.token}`,
+                    "Content-Type": init.body === undefined ? undefined : "video/mp4",
+                }),
+                ...definedFields({ body: init.body, signal: context.signal }),
+                maxAttempts: init.body === undefined ? Math.min(context.retryBudget.maxAttempts, 3) : 1,
+            });
+        }
+        catch (error) {
+            throw operationError(`bluesky.${method}`, error, init.body !== undefined);
+        }
+    }
+    /** Requests a short-lived service token from the account's PDS. The token is never logged. */
+    async function serviceToken(aud, lxm, expiresInSeconds, context) {
+        const query = new URLSearchParams({ aud, lxm });
+        if (expiresInSeconds !== undefined)
+            query.set("exp", String(Math.floor(Date.now() / 1000) + expiresInSeconds));
+        const response = object(await xrpc(`com.atproto.server.getServiceAuth?${query.toString()}`, context));
+        return string(response["token"]);
+    }
+    /** Resolves the PDS service DID that the video service stores the processed blob with. */
+    async function pdsAudience(context) {
+        if (options.pdsDid !== undefined)
+            return serviceDid(options.pdsDid, "bluesky.video.upload");
+        const session = object(await xrpc("com.atproto.server.getSession", context));
+        const didDoc = session["didDoc"];
+        if (session["did"] !== auth.did || didDoc === undefined)
+            throw new SocialError({
+                code: "invalid_config",
+                operation: "bluesky.video.upload",
+                message: "The session did not include a DID document for this account. Configure pdsDid for video uploads.",
+            });
+        const document = object(didDoc);
+        const pds = array(document["service"] ?? []).find((entry) => {
+            const service = object(entry);
+            return optionalString(service["id"])?.endsWith("#atproto_pds") === true;
+        });
+        if (document["id"] !== auth.did || pds === undefined)
+            throw new SocialError({
+                code: "invalid_config",
+                operation: "bluesky.video.upload",
+                message: "The DID document does not name a PDS for this account. Configure pdsDid.",
+            });
+        let host;
+        try {
+            const url = new URL(string(object(pds)["serviceEndpoint"]));
+            if (url.protocol !== "https:")
+                throw new Error("PDS endpoint must use HTTPS");
+            host = url.host;
+        }
+        catch {
+            throw new SocialError({
+                code: "invalid_config",
+                operation: "bluesky.video.upload",
+                message: "The DID document names an invalid PDS endpoint. Configure pdsDid.",
+            });
+        }
+        return serviceDid(`did:web:${host.replace(":", "%3A")}`, "bluesky.video.upload");
+    }
+    /** Validates a normalized video attachment and returns its MP4 bytes without I/O. */
+    function videoSource(media) {
+        const source = media.source;
+        const mimeType = media.mimeType ?? (source.kind === "blob" ? source.blob.type || undefined : undefined);
+        if (media.kind !== "video" || source.kind !== "blob" || mimeType !== "video/mp4")
+            throw new SocialError({
+                code: "invalid_input",
+                operation: "media.upload",
+                message: "Bluesky video upload requires one video/mp4 Blob.",
+                retryDisposition: { kind: "never" },
+            });
+        return source.blob;
     }
     const nativeContext = (context, operation) => context ?? {
         correlationId: operation,
@@ -497,7 +702,7 @@ export function bluesky(options) {
             });
         return new URLSearchParams({
             limit: String(limit),
-            ...(input.cursor ? { cursor: input.cursor } : {}),
+            ...definedFields({ cursor: input.cursor || undefined }),
         });
     };
     const recordKey = (uri, collection) => {
@@ -513,7 +718,7 @@ export function bluesky(options) {
     };
     const actorPage = (response, key) => ({
         actors: array(response[key] ?? []).map((value) => object(value)),
-        ...(typeof response["cursor"] === "string" ? { cursor: response["cursor"] } : {}),
+        ...definedFields({ cursor: optionalString(response["cursor"]) }),
     });
     const native = {
         async getPost(input) {
@@ -532,7 +737,6 @@ export function bluesky(options) {
                     operation: "bluesky.getPost",
                     message: "Bluesky post was not found.",
                 });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(post);
         },
         async getPostThread(input) {
@@ -542,7 +746,6 @@ export function bluesky(options) {
                 backendInstance: backend,
             };
             const query = new URLSearchParams({ uri: input.uri });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`app.bsky.feed.getPostThread?${query.toString()}`, context));
         },
         async searchPosts(input) {
@@ -604,23 +807,14 @@ export function bluesky(options) {
                     query.append("tag", normalizedTag);
             }
             const response = object(await xrpc(`app.bsky.feed.searchPosts?${query}`, context));
-            const posts = array(response["posts"]).map((post) => {
-                const value = object(post);
-                // The XRPC transport has already decoded a JSON payload; `object` validates
-                // the record boundary while the recursive JSON shape is preserved for callers.
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion
-                return value;
-            });
-            const cursorValue = response["cursor"];
-            const hitsTotalValue = response["hitsTotal"];
+            const posts = array(response["posts"]).map((post) => object(post));
+            const hitsTotal = optionalNumber(response["hitsTotal"]);
             return {
                 posts,
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(typeof cursorValue === "string" ? { cursor: cursorValue } : {}),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(typeof hitsTotalValue === "number" && Number.isSafeInteger(hitsTotalValue)
-                    ? { hitsTotal: hitsTotalValue }
-                    : {}),
+                ...definedFields({
+                    cursor: optionalString(response["cursor"]),
+                    hitsTotal: hitsTotal !== undefined && Number.isSafeInteger(hitsTotal) ? hitsTotal : undefined,
+                }),
             };
         },
         async likePost(input) {
@@ -656,13 +850,10 @@ export function bluesky(options) {
             }));
             const prefix = `at://${auth.did}/app.bsky.feed.like/`;
             const uri = response["uri"], cid = response["cid"];
-            if (
-            // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-            typeof uri !== "string" ||
+            if (!isString(uri) ||
                 !uri.startsWith(prefix) ||
                 !/^[A-Za-z0-9._~:-]{1,512}$/.test(uri.slice(prefix.length)) ||
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                typeof cid !== "string" ||
+                !isString(cid) ||
                 !cid)
                 throw new SocialError({
                     code: "ambiguous_outcome",
@@ -751,17 +942,79 @@ export function bluesky(options) {
                 body: JSON.stringify({ repo: auth.did, collection: "app.bsky.feed.post", rkey }),
             });
         },
-        async uploadVideo(_input) {
-            throw new SocialError({
-                code: "unsupported_capability",
-                operation: "bluesky.video.upload",
-                message: "Bluesky video upload requires the video service authentication and job polling flow; this adapter does not implement it.",
-            });
+        async uploadVideo(input) {
+            // https://docs.bsky.app/docs/tutorials/video (recommended method)
+            const context = nativeContext(input.context, "bluesky.video.upload");
+            assertNativeAccount(input.account, context, "bluesky.video.upload");
+            const name = input.name ?? "video.mp4";
+            if ((input.mimeType ?? input.video.type) !== "video/mp4" ||
+                input.video.size <= 0 ||
+                input.video.size > MAX_VIDEO_BYTES ||
+                name.length > 255 ||
+                [...name].some((char) => char.charCodeAt(0) < 0x20 || char === "/" || char === "\\"))
+                throw new SocialError({
+                    code: "invalid_input",
+                    operation: "bluesky.video.upload",
+                    message: `Bluesky video upload requires a non-empty video/mp4 Blob of at most ${MAX_VIDEO_BYTES} bytes and a plain file name.`,
+                    retryDisposition: { kind: "never" },
+                });
+            const token = await serviceToken(await pdsAudience(context), "com.atproto.repo.uploadBlob", VIDEO_UPLOAD_TOKEN_SECONDS, context);
+            const response = object(await videoRequest("app.bsky.video.uploadVideo", new URLSearchParams({ did: auth.did, name }), context, { token, body: input.video }));
+            try {
+                // The lexicon wraps the output in `jobStatus`; the video guide reads it unwrapped.
+                return videoJob(response["jobStatus"] ?? response, auth.did);
+            }
+            catch (error) {
+                throw operationError("bluesky.app.bsky.video.uploadVideo", error);
+            }
+        },
+        async getVideoJobStatus(input) {
+            // https://docs.bsky.app/docs/api/app-bsky-video-get-job-status
+            const context = nativeContext(input.context, "bluesky.video.job");
+            assertNativeAccount(input.account, context, "bluesky.video.job");
+            if (!/^[\x21-\x7e]{1,256}$/.test(input.jobId))
+                throw new SocialError({
+                    code: "invalid_input",
+                    operation: "bluesky.video.job",
+                    message: "Bluesky video job ID is malformed.",
+                    retryDisposition: { kind: "never" },
+                });
+            const response = object(await videoRequest("app.bsky.video.getJobStatus", new URLSearchParams({ jobId: input.jobId }), context));
+            try {
+                return videoJob(response["jobStatus"], auth.did);
+            }
+            catch (error) {
+                throw operationError("bluesky.app.bsky.video.getJobStatus", error, false);
+            }
+        },
+        async getVideoUploadLimits(input) {
+            // https://docs.bsky.app/docs/api/app-bsky-video-get-upload-limits
+            const context = nativeContext(input.context, "bluesky.video.limits");
+            assertNativeAccount(input.account, context, "bluesky.video.limits");
+            const token = await serviceToken(`did:web:${videoOrigin.host.replace(":", "%3A")}`, "app.bsky.video.getUploadLimits", undefined, context);
+            const response = object(await videoRequest("app.bsky.video.getUploadLimits", new URLSearchParams(), context, {
+                token,
+            }));
+            const canUpload = response["canUpload"];
+            if (!isBoolean(canUpload))
+                throw operationError("bluesky.app.bsky.video.getUploadLimits", new HttpError("Upload limits are missing canUpload.", "invalid-response", true), false);
+            const videos = optionalNumber(response["remainingDailyVideos"]);
+            const bytes = optionalNumber(response["remainingDailyBytes"]);
+            const message = optionalString(response["message"]);
+            const error = optionalString(response["error"]);
+            return {
+                canUpload,
+                ...definedFields({
+                    remainingDailyVideos: videos,
+                    remainingDailyBytes: bytes,
+                    message,
+                    error,
+                }),
+            };
         },
         async follow(input) {
             const context = nativeContext(input.context, "bluesky.follow");
             assertNativeAccount(input.account, context, "bluesky.follow");
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc("com.atproto.repo.createRecord", context, {
                 body: JSON.stringify({
                     repo: auth.did,
@@ -788,7 +1041,6 @@ export function bluesky(options) {
         async block(input) {
             const context = nativeContext(input.context, "bluesky.block");
             assertNativeAccount(input.account, context, "bluesky.block");
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc("com.atproto.repo.createRecord", context, {
                 body: JSON.stringify({
                     repo: auth.did,
@@ -860,7 +1112,7 @@ export function bluesky(options) {
             const value = object(await xrpc(`app.bsky.feed.getLikes?${q}`, context));
             return {
                 likes: array(value["likes"] ?? []).map((entry) => object(entry)),
-                ...(typeof value["cursor"] === "string" ? { cursor: value["cursor"] } : {}),
+                ...definedFields({ cursor: optionalString(value["cursor"]) }),
             };
         },
         async getActorLikes(input) {
@@ -871,7 +1123,7 @@ export function bluesky(options) {
             const value = object(await xrpc(`app.bsky.feed.getActorLikes?${q}`, context));
             return {
                 feed: array(value["feed"] ?? []).map((entry) => object(entry)),
-                ...(typeof value["cursor"] === "string" ? { cursor: value["cursor"] } : {}),
+                ...definedFields({ cursor: optionalString(value["cursor"]) }),
             };
         },
         async searchActors(input) {
@@ -914,11 +1166,11 @@ export function bluesky(options) {
                 name: input.name,
                 purpose: input.purpose,
                 createdAt: new Date().toISOString(),
-                ...(input.description === undefined ? {} : { description: input.description }),
+                ...definedFields({ description: input.description }),
             };
-            return postRef(object(await xrpc("com.atproto.repo.createRecord", context, {
+            return postRef(await xrpc("com.atproto.repo.createRecord", context, {
                 body: JSON.stringify({ repo: auth.did, collection: "app.bsky.graph.list", record }),
-            })));
+            }));
         },
         async updateList(input) {
             const context = nativeContext(input.context, "bluesky.lists.update");
@@ -929,7 +1181,7 @@ export function bluesky(options) {
                 ...record,
                 name: input.name,
                 purpose: input.purpose,
-                ...(input.description === undefined ? {} : { description: input.description }),
+                ...definedFields({ description: input.description }),
             };
             await xrpc("com.atproto.repo.putRecord", context, {
                 body: JSON.stringify({
@@ -954,7 +1206,7 @@ export function bluesky(options) {
         async addListItem(input) {
             const context = nativeContext(input.context, "bluesky.lists.items.add");
             assertNativeAccount(input.account, context, "bluesky.lists.items.add");
-            return postRef(object(await xrpc("com.atproto.repo.createRecord", context, {
+            return postRef(await xrpc("com.atproto.repo.createRecord", context, {
                 body: JSON.stringify({
                     repo: auth.did,
                     collection: "app.bsky.graph.listitem",
@@ -965,7 +1217,7 @@ export function bluesky(options) {
                         createdAt: new Date().toISOString(),
                     },
                 }),
-            })));
+            }));
         },
         async removeListItem(input) {
             const context = nativeContext(input.context, "bluesky.lists.items.remove");
@@ -1031,13 +1283,13 @@ export function bluesky(options) {
                     repo: auth.did,
                     collection: "app.bsky.graph.listblock",
                     limit: "100",
-                    ...(cursor === undefined ? {} : { cursor }),
+                    ...definedFields({ cursor }),
                 });
                 const records = object(await xrpc(`com.atproto.repo.listRecords?${query.toString()}`, context));
                 record = array(records["records"])
                     .map((value) => object(value))
                     .find((value) => object(value["value"])["subject"] === input.listUri);
-                cursor = typeof records["cursor"] === "string" ? records["cursor"] : undefined;
+                cursor = optionalString(records["cursor"]);
             } while (record === undefined && cursor !== undefined);
             if (record === undefined)
                 throw new SocialError({
@@ -1059,7 +1311,7 @@ export function bluesky(options) {
             const body = {
                 reasonType: input.reasonType,
                 subject: input.subject,
-                ...(input.reason === undefined ? {} : { reason: input.reason }),
+                ...definedFields({ reason: input.reason }),
             };
             return object(await xrpc("com.atproto.moderation.createReport", context, { body: JSON.stringify(body) }));
         },
@@ -1075,10 +1327,8 @@ export function bluesky(options) {
                 });
             const query = new URLSearchParams({
                 limit: String(limit),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(input.cursor ? { cursor: input.cursor } : {}),
+                ...definedFields({ cursor: input.cursor || undefined }),
             });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`app.bsky.notification.listNotifications?${query}`, context));
         },
         async markNotificationsSeen(input) {
@@ -1091,7 +1341,6 @@ export function bluesky(options) {
         async getProfile(input) {
             const context = nativeContext(input.context, "bluesky.profile.get");
             assertNativeAccount(input.account, context, "bluesky.profile.get");
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`app.bsky.actor.getProfile?actor=${encodeURIComponent(input.actor ?? auth.did)}`, context));
         },
         async updateProfile(input) {
@@ -1118,10 +1367,8 @@ export function bluesky(options) {
                 });
             const query = new URLSearchParams({
                 limit: String(limit),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(input.cursor ? { cursor: input.cursor } : {}),
+                ...definedFields({ cursor: input.cursor || undefined }),
             });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`app.bsky.feed.getSuggestedFeeds?${query}`, context));
         },
         async listConversations(input) {
@@ -1136,10 +1383,8 @@ export function bluesky(options) {
                 });
             const query = new URLSearchParams({
                 limit: String(limit),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(input.cursor ? { cursor: input.cursor } : {}),
+                ...definedFields({ cursor: input.cursor || undefined }),
             });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`chat.bsky.convo.listConvos?${query}`, context));
         },
         async listMessages(input) {
@@ -1154,10 +1399,8 @@ export function bluesky(options) {
                 });
             const query = new URLSearchParams({
                 limit: String(limit),
-                // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                ...(input.cursor ? { cursor: input.cursor } : {}),
+                ...definedFields({ cursor: input.cursor || undefined }),
             });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc(`chat.bsky.convo.getMessages?convoId=${encodeURIComponent(input.conversationId)}&${query}`, context));
         },
         async sendMessage(input) {
@@ -1169,24 +1412,129 @@ export function bluesky(options) {
                     operation: "bluesky.chat.send",
                     message: "Message text is required.",
                 });
-            // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
             return object(await xrpc("chat.bsky.convo.sendMessage", context, {
                 body: JSON.stringify({ convoId: input.conversationId, message: { text: input.text } }),
             }));
         },
+        async hideReply(input) {
+            const operation = "bluesky.comments.moderate";
+            const context = nativeContext(input.context, operation);
+            assertNativeAccount(input.account, context, operation);
+            const invalid = (message) => new SocialError({
+                code: "invalid_input",
+                operation,
+                message,
+                retryDisposition: { kind: "never" },
+            });
+            const postUri = /^at:\/\/did:[a-z]+:[A-Za-z0-9._:%-]+\/app\.bsky\.feed\.post\/[A-Za-z0-9._~:-]{1,512}$/;
+            if (!postUri.test(input.replyUri))
+                throw invalid("Reply must be an app.bsky.feed.post AT-URI.");
+            const postView = async (uri) => {
+                const query = new URLSearchParams({ uris: uri });
+                const found = array(object(await xrpc(`app.bsky.feed.getPosts?${query.toString()}`, context))["posts"])
+                    .map((value) => object(value))
+                    .find((value) => value["uri"] === uri);
+                if (found === undefined)
+                    throw new SocialError({
+                        code: "not_found",
+                        operation,
+                        message: "Bluesky post was not found.",
+                    });
+                return found;
+            };
+            const reply = object(object((await postView(input.replyUri))["record"]))["reply"];
+            if (reply === undefined)
+                throw invalid("The URI identifies a root post, not a reply.");
+            const rootUri = string(object(object(reply)["root"])["uri"]);
+            if (!rootUri.startsWith(`at://${auth.did}/app.bsky.feed.post/`))
+                throw invalid("Only the author of the thread's root post can hide its replies.");
+            const rkey = recordKey(rootUri, "app.bsky.feed.post");
+            const threadgateUri = `at://${auth.did}/app.bsky.feed.threadgate/${rkey}`;
+            const gate = (await postView(rootUri))["threadgate"];
+            let existing;
+            if (gate !== undefined) {
+                const view = object(gate);
+                if (view["uri"] !== threadgateUri)
+                    throw new SocialError({
+                        code: "upstream_failure",
+                        operation,
+                        message: "Bluesky returned a threadgate for a different post.",
+                    });
+                const record = object(view["record"]);
+                existing = {
+                    ref: postRef(view),
+                    record,
+                    hiddenReplies: record["hiddenReplies"] === undefined
+                        ? []
+                        : array(record["hiddenReplies"]).map((value) => string(value)),
+                };
+            }
+            const current = existing?.hiddenReplies.includes(input.replyUri) ?? false;
+            if (current === input.hidden)
+                return existing === undefined
+                    ? { hidden: current }
+                    : { hidden: current, threadgate: existing.ref };
+            if (existing === undefined) {
+                // Omit `allow`: an absent allow list keeps replies open, an empty one closes them.
+                const created = await xrpc("com.atproto.repo.createRecord", context, {
+                    body: JSON.stringify({
+                        repo: auth.did,
+                        collection: "app.bsky.feed.threadgate",
+                        rkey,
+                        record: {
+                            $type: "app.bsky.feed.threadgate",
+                            post: rootUri,
+                            createdAt: new Date().toISOString(),
+                            hiddenReplies: [input.replyUri],
+                        },
+                    }),
+                });
+                return { hidden: true, threadgate: postRef(created) };
+            }
+            const hiddenReplies = input.hidden
+                ? [...existing.hiddenReplies, input.replyUri]
+                : existing.hiddenReplies.filter((uri) => uri !== input.replyUri);
+            // swapRecord makes the PDS reject the write if the threadgate changed since it was read.
+            const updated = await xrpc("com.atproto.repo.putRecord", context, {
+                body: JSON.stringify({
+                    repo: auth.did,
+                    collection: "app.bsky.feed.threadgate",
+                    rkey,
+                    record: { ...existing.record, hiddenReplies },
+                    swapRecord: existing.ref.cid,
+                }),
+            });
+            return { hidden: input.hidden, threadgate: postRef(updated) };
+        },
     };
     const adapter = defineAdapter({
         id: backend,
         capabilities,
         native,
+        media: {
+            async upload(media, accountRef, context) {
+                const job = await native.uploadVideo({
+                    account: accountRef,
+                    video: videoSource(media),
+                    mimeType: "video/mp4",
+                    ...definedFields({ name: media.filename }),
+                    context,
+                });
+                return {
+                    kind: "media",
+                    version: 1,
+                    backend,
+                    platform: "bluesky",
+                    accountId: auth.did,
+                    mediaId: job.jobId,
+                };
+            },
+        },
         graph: {
             async getProfile(account, input, context) {
                 const value = await native.getProfile({
                     account,
-                    ...(input.profileId === undefined ? {} : { actor: input.profileId }),
-                    ...(input.profileId === undefined && input.handle !== undefined
-                        ? { actor: input.handle }
-                        : {}),
+                    ...definedFields({ actor: input.profileId ?? input.handle }),
                     context,
                 });
                 const actor = object(value);
@@ -1198,42 +1546,39 @@ export function bluesky(options) {
                         accountId: account.accountId,
                         profileId: id,
                     }),
-                    ...(typeof actor["displayName"] === "string"
-                        ? { displayName: actor["displayName"] }
-                        : {}),
-                    ...(typeof actor["handle"] === "string" ? { handle: actor["handle"] } : {}),
-                    ...(typeof actor["avatar"] === "string" ? { avatarUrl: actor["avatar"] } : {}),
-                    ...(typeof actor["description"] === "string" ? { bio: actor["description"] } : {}),
+                    ...definedFields({
+                        displayName: optionalString(actor["displayName"]),
+                        handle: optionalString(actor["handle"]),
+                        avatarUrl: optionalString(actor["avatar"]),
+                        bio: optionalString(actor["description"]),
+                    }),
                     native: actor,
                 };
             },
             async listRelationships(account, input, context) {
+                const page = definedFields({ cursor: input.cursor, limit: input.limit });
                 const result = input.kind === "following"
                     ? await native.getFollows({
                         account,
                         context,
-                        ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                        ...(input.limit === undefined ? {} : { limit: input.limit }),
+                        ...page,
                     })
                     : input.kind === "followers"
                         ? await native.getFollowers({
                             account,
                             context,
-                            ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                            ...(input.limit === undefined ? {} : { limit: input.limit }),
+                            ...page,
                         })
                         : input.kind === "blocked"
                             ? await native.getBlocks({
                                 account,
                                 context,
-                                ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                                ...(input.limit === undefined ? {} : { limit: input.limit }),
+                                ...page,
                             })
                             : await native.getMutes({
                                 account,
                                 context,
-                                ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                                ...(input.limit === undefined ? {} : { limit: input.limit }),
+                                ...page,
                             });
                 return {
                     items: result.actors.map((actor) => {
@@ -1253,7 +1598,7 @@ export function bluesky(options) {
                                     : input.kind,
                         };
                     }),
-                    ...(result.cursor === undefined ? {} : { nextCursor: result.cursor }),
+                    ...definedFields({ nextCursor: result.cursor }),
                 };
             },
             async follow(target, context) {
@@ -1264,7 +1609,7 @@ export function bluesky(options) {
                 const profile = object(await native.getProfile({ account, actor: target.profileId, context }));
                 const viewer = object(profile["viewer"] ?? {});
                 const uri = viewer["following"];
-                if (typeof uri !== "string" || !uri)
+                if (!isString(uri) || !uri)
                     throw new SocialError({
                         code: "invalid_input",
                         operation: "graph.unfollow",
@@ -1280,7 +1625,7 @@ export function bluesky(options) {
                 const profile = object(await native.getProfile({ account, actor: target.profileId, context }));
                 const viewer = object(profile["viewer"] ?? {});
                 const uri = viewer["blocking"];
-                if (typeof uri !== "string" || !uri)
+                if (!isString(uri) || !uri)
                     throw new SocialError({
                         code: "invalid_input",
                         operation: "graph.unblock",
@@ -1304,8 +1649,7 @@ export function bluesky(options) {
                         {
                             ref: account,
                             displayName: session.handle ?? session.did,
-                            // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                            ...(session.handle === undefined ? {} : { handle: session.handle }),
+                            ...definedFields({ handle: session.handle }),
                             status: "connected",
                         },
                     ],
@@ -1323,8 +1667,7 @@ export function bluesky(options) {
                 return {
                     ref: account,
                     displayName: session.handle ?? session.did,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(session.handle === undefined ? {} : { handle: session.handle }),
+                    ...definedFields({ handle: session.handle }),
                     status: "connected",
                 };
             },
@@ -1341,17 +1684,21 @@ export function bluesky(options) {
                 const result = await native.searchPosts({
                     account,
                     query: input.query,
-                    ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                    ...(input.limit === undefined ? {} : { limit: input.limit }),
-                    ...(input.startTime === undefined ? {} : { since: input.startTime }),
-                    ...(input.endTime === undefined ? {} : { until: input.endTime }),
-                    ...(input.scope === undefined ? {} : { scope: input.scope }),
+                    ...definedFields({
+                        cursor: input.cursor,
+                        limit: input.limit,
+                        since: input.startTime,
+                        until: input.endTime,
+                        scope: input.scope,
+                    }),
                     context,
                 });
                 return {
                     items: result.posts,
-                    ...(result.cursor === undefined ? {} : { nextCursor: result.cursor }),
-                    ...(result.hitsTotal === undefined ? {} : { metadata: { hitsTotal: result.hitsTotal } }),
+                    ...definedFields({
+                        nextCursor: result.cursor,
+                        metadata: result.hitsTotal === undefined ? undefined : { hitsTotal: result.hitsTotal },
+                    }),
                 };
             },
         },
@@ -1366,24 +1713,14 @@ export function bluesky(options) {
                     });
                 const response = await native.listNotifications({
                     account,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(input.limit === undefined ? {} : { limit: input.limit }),
+                    ...definedFields({ cursor: input.cursor, limit: input.limit }),
                     context,
                 });
                 const values = response["notifications"];
-                const items = values === undefined
-                    ? []
-                    : array(values).map((value) => {
-                        // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated provider notification object.
-                        return object(value);
-                    });
-                const cursor = response["cursor"];
+                const items = values === undefined ? [] : array(values).map((value) => object(value));
                 return {
                     items,
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                    ...(typeof cursor === "string" ? { nextCursor: cursor } : {}),
+                    ...definedFields({ nextCursor: optionalString(response["cursor"]) }),
                 };
             },
             async markSeen(account, input, context) {
@@ -1396,8 +1733,7 @@ export function bluesky(options) {
                     });
                 await native.markNotificationsSeen({
                     account,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(input.seenAt === undefined ? {} : { seenAt: input.seenAt }),
+                    ...definedFields({ seenAt: input.seenAt }),
                     context,
                 });
             },
@@ -1420,8 +1756,7 @@ export function bluesky(options) {
                 const query = new URLSearchParams({
                     actor: auth.did,
                     limit: String(limit),
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
+                    ...definedFields({ cursor: input.cursor }),
                 });
                 const response = object(await xrpc(`app.bsky.feed.getAuthorFeed?${query.toString()}`, context));
                 const feed = array(response["feed"]).map((value) => {
@@ -1438,53 +1773,45 @@ export function bluesky(options) {
                             "indexedAt",
                             "labels",
                         ]),
-                        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                        ...(post["author"] === undefined
-                            ? {}
-                            : {
-                                author: publicFields(object(post["author"]), [
+                        ...definedFields({
+                            author: post["author"] === undefined
+                                ? undefined
+                                : publicFields(object(post["author"]), [
                                     "did",
                                     "handle",
                                     "displayName",
                                     "avatar",
                                 ]),
-                            }),
-                        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                        ...(post["record"] === undefined
-                            ? {}
-                            : {
-                                record: publicFields(object(post["record"]), [
+                            record: post["record"] === undefined
+                                ? undefined
+                                : publicFields(object(post["record"]), [
                                     "text",
                                     "facets",
                                     "createdAt",
                                     "reply",
                                     "embed",
                                 ]),
-                            }),
+                        }),
                     };
-                    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
                     return {
                         post: safePost,
-                        // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                        ...(entry["reason"] === undefined
-                            ? {}
-                            : { reason: publicFields(object(entry["reason"]), ["$type", "by", "indexedAt"]) }),
+                        ...definedFields({
+                            reason: entry["reason"] === undefined
+                                ? undefined
+                                : publicFields(object(entry["reason"]), ["$type", "by", "indexedAt"]),
+                        }),
                     };
                 });
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                const cursor = typeof response["cursor"] === "string" ? response["cursor"] : undefined;
                 return {
-                    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
                     items: feed,
-                    // oxlint-disable-next-line anti-slop/no-conditional-empty-object-spread -- validated boundary or fixture contract.
-                    ...(cursor === undefined ? {} : { nextCursor: cursor }),
+                    ...definedFields({ nextCursor: optionalString(response["cursor"]) }),
                 };
             },
             prepareTarget(target) {
                 const issues = [];
                 const text = target.content.text ?? "";
                 try {
-                    richTextOptions(text, target.options);
+                    richTextOptions(text, target);
                 }
                 catch (error) {
                     issues.push({
@@ -1511,13 +1838,46 @@ export function bluesky(options) {
                         message: "Bluesky scheduling requires an application-owned job runner.",
                         severity: "error",
                     });
-                if (target.content.media?.some((media) => media.kind !== "image"))
+                const media = target.content.media ?? [];
+                const videos = media.filter((item) => item.kind === "video");
+                if (media.some((item) => item.kind === "document"))
                     issues.push({
-                        code: "media.unsupported",
-                        message: "Bluesky direct publishing supports images, not video.",
+                        code: "media.unsupported_kind",
+                        message: "Bluesky posts accept image and video media only.",
                         severity: "error",
                     });
-                if ((target.content.media?.length ?? 0) > MAX_IMAGES)
+                if (videos.length > 0 && media.length !== 1)
+                    issues.push({
+                        code: "media.mixed",
+                        message: "A Bluesky post carries either up to four images or exactly one video.",
+                        severity: "error",
+                    });
+                for (const video of videos) {
+                    const ref = video.source.kind === "media-ref" ? video.source.ref : undefined;
+                    if (ref === undefined)
+                        issues.push({
+                            code: "media.video_ref_required",
+                            message: "Upload the video with media.upload, wait until its job has a blob, then publish the returned media reference.",
+                            severity: "error",
+                        });
+                    else if (ref.backend !== target.account.backend ||
+                        ref.platform !== "bluesky" ||
+                        ref.accountId !== target.account.accountId ||
+                        !/^[\x21-\x7e]{1,256}$/.test(ref.mediaId))
+                        issues.push({
+                            code: "media.video_owner",
+                            message: "Video reference belongs to another account or backend, or is malformed.",
+                            severity: "error",
+                        });
+                    if ((video.width === undefined) !== (video.height === undefined) ||
+                        [video.width, video.height].some((value) => value !== undefined && (!Number.isSafeInteger(value) || value < 1)))
+                        issues.push({
+                            code: "media.aspect_ratio",
+                            message: "Video width and height must be supplied together as positive integers.",
+                            severity: "error",
+                        });
+                }
+                if (videos.length === 0 && media.length > MAX_IMAGES)
                     issues.push({
                         code: "media.too_many",
                         message: `Bluesky supports at most ${MAX_IMAGES} images per post.`,
@@ -1536,20 +1896,10 @@ export function bluesky(options) {
                 try {
                     const content = target.content;
                     const text = content.text ?? "";
-                    // oxlint-disable-next-line anti-slop/no-known-value-widening -- validated boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- validated boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-known-value-widening -- provider payload is validated at this adapter boundary.
-                    // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-known-value-widening -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-known-value-widening -- validated external boundary or fixture contract.
-                    // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- validated external boundary or fixture contract.
-                    const record = {
-                        $type: "app.bsky.feed.post",
-                        text,
-                        createdAt: new Date().toISOString(),
-                    };
-                    Object.assign(record, richTextOptions(text, target.options));
+                    const createdAt = new Date().toISOString();
+                    const richText = richTextOptions(text, target);
+                    let reply;
+                    let embed;
                     if (target.replyTo !== undefined) {
                         if (target.replyTo.kind !== "platform-post")
                             throw new SocialError({
@@ -1570,32 +1920,85 @@ export function bluesky(options) {
                             };
                         const rootValue = parentRecord["reply"];
                         const root = rootValue === undefined ? parentRef : object(object(rootValue)["root"]);
-                        Object.assign(record, { reply: { root, parent: parentRef } });
+                        reply = { root, parent: parentRef };
+                    }
+                    const video = content.media?.find((item) => item.kind === "video");
+                    if (video !== undefined) {
+                        if (video.source.kind !== "media-ref" || content.media?.length !== 1)
+                            throw new SocialError({
+                                code: "invalid_input",
+                                operation: "bluesky.publish",
+                                message: "Bluesky video posts require exactly one uploaded video reference.",
+                                retryDisposition: { kind: "never" },
+                            });
+                        const ref = video.source.ref;
+                        if (ref.backend !== backend || ref.platform !== "bluesky" || ref.accountId !== auth.did)
+                            throw new SocialError({
+                                code: "unauthorized",
+                                operation: "bluesky.publish",
+                                message: "The video reference does not belong to this adapter.",
+                                account: target.account,
+                            });
+                        // One status read. A job that is still processing fails before any post is created.
+                        const job = await native.getVideoJobStatus({
+                            account: target.account,
+                            jobId: ref.mediaId,
+                            context,
+                        });
+                        if (job.blob === undefined)
+                            throw new SocialError(job.state === "JOB_STATE_FAILED"
+                                ? {
+                                    code: "media_error",
+                                    operation: "bluesky.publish",
+                                    message: "Bluesky video processing failed. No post was created.",
+                                    retryDisposition: { kind: "never" },
+                                    ...definedFields({ upstreamCode: job.failureCode }),
+                                }
+                                : {
+                                    code: "media_error",
+                                    operation: "bluesky.publish",
+                                    message: "Bluesky video processing is not complete. No post was created. Check native.getVideoJobStatus, then publish again.",
+                                    retryDisposition: { kind: "after-delay", delayMs: 1000 },
+                                    upstreamCode: job.state,
+                                });
+                        embed = {
+                            $type: "app.bsky.embed.video",
+                            video: job.blob,
+                            ...definedFields({
+                                alt: video.altText,
+                                aspectRatio: video.width === undefined || video.height === undefined
+                                    ? undefined
+                                    : { width: video.width, height: video.height },
+                            }),
+                        };
                     }
-                    if (content.media !== undefined && content.media.length > 0) {
-                        // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- validated boundary or fixture contract.
+                    else if (content.media !== undefined && content.media.length > 0) {
                         const blobs = [];
                         for (const media of content.media) {
                             const source = await readMedia(media.source, fetcher, context, allowMediaHost);
                             const blob = object(await xrpc("com.atproto.repo.uploadBlob", context, {
-                                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
-                                body: new Blob([source.bytes.slice().buffer], {
+                                body: new Blob([source.bytes.slice()], {
                                     type: source.mimeType,
                                 }),
                                 headers: { "Content-Type": source.mimeType },
                             }));
                             blobs.push(object(blob["blob"]));
                         }
-                        Object.assign(record, {
-                            embed: {
-                                $type: "app.bsky.embed.images",
-                                images: blobs.map((blob, index) => ({
-                                    image: blob,
-                                    alt: content.media?.[index]?.altText ?? "",
-                                })),
-                            },
-                        });
+                        embed = {
+                            $type: "app.bsky.embed.images",
+                            images: blobs.map((blob, index) => ({
+                                image: blob,
+                                alt: content.media?.[index]?.altText ?? "",
+                            })),
+                        };
                     }
+                    const record = {
+                        $type: "app.bsky.feed.post",
+                        text,
+                        createdAt,
+                        ...richText,
+                        ...definedFields({ reply, embed }),
+                    };
                     const response = object(await xrpc("com.atproto.repo.createRecord", context, {
                         body: JSON.stringify({ repo: auth.did, collection: "app.bsky.feed.post", record }),
                         headers: { "Content-Type": "application/json" },
@@ -1670,7 +2073,6 @@ export function bluesky(options) {
                     });
                 const thread = await native.getPostThread({ uri: post.postId, context });
                 const replies = array(object(thread["thread"])["replies"] ?? []);
-                // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- validated boundary or fixture contract.
                 return { items: replies.map((reply) => object(reply)) };
             },
             async reply(comment, content, context) {
@@ -1720,8 +2122,7 @@ export function bluesky(options) {
                     ["quotes", "quoteCount"],
                 ]) {
                     const count = record[field];
-                    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                    if (typeof count === "number" && Number.isFinite(count))
+                    if (isFiniteNumber(count))
                         metrics.push({
                             name,
                             value: count,
@@ -1754,9 +2155,7 @@ export function bluesky(options) {
                     ["followers", profile["followersCount"]],
                     ["following", profile["followsCount"]],
                     ["posts", profile["postsCount"]],
-                ].flatMap(([name, value]) => 
-                // oxlint-disable-next-line anti-slop/no-runtime-typeof -- validated boundary or fixture contract.
-                typeof value === "number" && Number.isFinite(value)
+                ].flatMap(([name, value]) => isFiniteNumber(value)
                     ? [
                         {
                             name,