@venturekit-pro/social 0.0.0-dev.20260602192622

package/dist/validation.js

@@ -0,0 +1,157 @@
+/**
+ * Generic post-validation. Adapters compose this with their per-
+ * platform `SocialPlatformConstraints` to surface a uniform error
+ * shape without re-implementing every check four times.
+ *
+ * Returns BOTH errors AND warnings. Callers MUST block publish on
+ * `severity === 'error'`; warnings are informational ("you only
+ * have 1 hashtag, LinkedIn recommends 2-5").
+ */
+const HASHTAG_PATTERN = /#[\w\u00C0-\u024F\u4E00-\u9FFF]+/g;
+const URL_PATTERN = /^https?:\/\/[\w-]+(\.[\w-]+)+([\w.,@?^=%&:/~+#-]*)$/;
+export function validatePost(post, constraints) {
+    const issues = [];
+    // ─── Body length ──────────────────────────────────────────────────
+    const body = post.body ?? '';
+    const bodyLen = [...body].length; // grapheme-ish count via spread; better than .length for non-Latin
+    if (constraints.minBodyChars > 0 && bodyLen === 0) {
+        issues.push({
+            code: 'body_empty',
+            severity: 'error',
+            message: 'Post body is empty.',
+        });
+    }
+    else if (bodyLen < constraints.minBodyChars) {
+        issues.push({
+            code: 'body_too_short',
+            severity: 'error',
+            message: `Body too short (${bodyLen} chars; minimum ${constraints.minBodyChars}).`,
+        });
+    }
+    if (bodyLen > constraints.maxBodyChars) {
+        issues.push({
+            code: 'body_too_long',
+            severity: 'error',
+            message: `Body too long (${bodyLen} chars; max ${constraints.maxBodyChars}).`,
+        });
+    }
+    // ─── Hashtags ─────────────────────────────────────────────────────
+    const hashtags = body.match(HASHTAG_PATTERN) ?? [];
+    if (hashtags.length < constraints.minHashtags) {
+        issues.push({
+            code: 'hashtag_count_low',
+            severity: 'warning',
+            message: `Hashtag count below recommendation (${hashtags.length}; min ${constraints.minHashtags}).`,
+        });
+    }
+    if (hashtags.length > constraints.maxHashtags) {
+        issues.push({
+            code: 'hashtag_count_high',
+            severity: 'warning',
+            message: `Hashtag count above recommendation (${hashtags.length}; max ${constraints.maxHashtags}).`,
+        });
+    }
+    // ─── Media presence + count ──────────────────────────────────────
+    const media = post.media ?? [];
+    if (constraints.maxMediaCount === 0 && media.length > 0) {
+        issues.push({
+            code: 'media_count_high',
+            severity: 'error',
+            message: 'Platform does not accept media attachments.',
+        });
+    }
+    if (constraints.maxMediaCount > 0 &&
+        media.length > constraints.maxMediaCount) {
+        issues.push({
+            code: 'media_count_high',
+            severity: 'error',
+            message: `Too many media items (${media.length}; max ${constraints.maxMediaCount}).`,
+        });
+    }
+    // Some platforms (e.g. Instagram) require media on every post.
+    if (constraints.allowedMimeTypes.length > 0 &&
+        constraints.maxMediaCount > 0 &&
+        media.length === 0 &&
+        requiresMedia(constraints)) {
+        issues.push({
+            code: 'media_required',
+            severity: 'error',
+            message: 'Platform requires at least one media attachment.',
+        });
+    }
+    // ─── Per-media validation ────────────────────────────────────────
+    for (const m of media) {
+        if (constraints.allowedMimeTypes.length > 0 &&
+            !constraints.allowedMimeTypes.includes(m.mimeType)) {
+            issues.push({
+                code: 'media_mime_unsupported',
+                severity: 'error',
+                message: `Unsupported MIME type: ${m.mimeType}. Allowed: ${constraints.allowedMimeTypes.join(', ')}.`,
+            });
+        }
+        if (constraints.maxMediaSizeBytes > 0 &&
+            m.sizeBytes !== undefined &&
+            m.sizeBytes > constraints.maxMediaSizeBytes) {
+            issues.push({
+                code: 'media_too_large',
+                severity: 'error',
+                message: `Media too large (${m.sizeBytes} bytes; max ${constraints.maxMediaSizeBytes}).`,
+            });
+        }
+        if (constraints.allowedAspectRatios.length > 0 &&
+            m.width !== undefined &&
+            m.height !== undefined) {
+            const ratio = simplifyRatio(m.width, m.height);
+            if (!constraints.allowedAspectRatios.includes(ratio)) {
+                issues.push({
+                    code: 'aspect_ratio_unsupported',
+                    severity: 'warning',
+                    message: `Aspect ratio ${ratio} not in allow-list (${constraints.allowedAspectRatios.join(', ')}).`,
+                });
+            }
+        }
+    }
+    // ─── Link ────────────────────────────────────────────────────────
+    if (post.link && !URL_PATTERN.test(post.link)) {
+        issues.push({
+            code: 'link_invalid',
+            severity: 'error',
+            message: `Link does not look like a valid URL: ${post.link}`,
+        });
+    }
+    const ok = !issues.some((i) => i.severity === 'error');
+    return { ok, issues };
+}
+// ─── Internal helpers ──────────────────────────────────────────────────
+/**
+ * Whether the platform refuses text-only posts. Reads the explicit
+ * `requiresMedia` flag from the constraints (defaults to `false`).
+ *
+ * The flag is decoupled from `minBodyChars` because Instagram requires
+ * BOTH a non-empty caption AND a media item — a heuristic of "media
+ * required when minBodyChars === 0" would miss that case.
+ */
+function requiresMedia(c) {
+    return c.requiresMedia === true;
+}
+/**
+ * Reduce `(width, height)` to a normalized `W:H` ratio string.
+ * Matches the format used in `allowedAspectRatios`.
+ */
+export function simplifyRatio(width, height) {
+    if (width <= 0 || height <= 0)
+        return `${width}:${height}`;
+    const g = gcd(width, height);
+    return `${width / g}:${height / g}`;
+}
+function gcd(a, b) {
+    let x = Math.abs(Math.trunc(a));
+    let y = Math.abs(Math.trunc(b));
+    while (y) {
+        const t = y;
+        y = x % y;
+        x = t;
+    }
+    return x || 1;
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAC5D,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAE1E,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,WAAsC;IAEtC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,mEAAmE;IACrG,IAAI,WAAW,CAAC,YAAY,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,mBAAmB,OAAO,mBAAmB,WAAW,CAAC,YAAY,IAAI;SACnF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,kBAAkB,OAAO,eAAe,WAAW,CAAC,YAAY,IAAI;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,uCAAuC,QAAQ,CAAC,MAAM,SAAS,WAAW,CAAC,WAAW,IAAI;SACpG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,uCAAuC,QAAQ,CAAC,MAAM,SAAS,WAAW,CAAC,WAAW,IAAI;SACpG,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,WAAW,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IACE,WAAW,CAAC,aAAa,GAAG,CAAC;QAC7B,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa,EACxC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,KAAK,CAAC,MAAM,SAAS,WAAW,CAAC,aAAa,IAAI;SACrF,CAAC,CAAC;IACL,CAAC;IACD,+DAA+D;IAC/D,IACE,WAAW,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACvC,WAAW,CAAC,aAAa,GAAG,CAAC;QAC7B,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,aAAa,CAAC,WAAW,CAAC,EAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IACE,WAAW,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAClD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,0BAA0B,CAAC,CAAC,QAAQ,cAAc,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACtG,CAAC,CAAC;QACL,CAAC;QACD,IACE,WAAW,CAAC,iBAAiB,GAAG,CAAC;YACjC,CAAC,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,iBAAiB,EAC3C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,CAAC,CAAC,SAAS,eAAe,WAAW,CAAC,iBAAiB,IAAI;aACzF,CAAC,CAAC;QACL,CAAC;QACD,IACE,WAAW,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;YAC1C,CAAC,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,MAAM,KAAK,SAAS,EACtB,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,0BAA0B;oBAChC,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,gBAAgB,KAAK,uBAAuB,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;iBACpG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,wCAAwC,IAAI,CAAC,IAAI,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC;AAED,0EAA0E;AAE1E;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,CAA4B;IACjD,OAAO,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,MAAc;IACzD,IAAI,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,GAAG,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACV,CAAC,GAAG,CAAC,CAAC;IACR,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@venturekit-pro/social",
+  "version": "0.0.0-dev.20260602192622",
+  "description": "Social-platform publishing adapters + catalog for VentureKit applications",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "src/migrations/*.sql"
+  ],
+  "vk": {
+    "migrations": "src/migrations"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/venturekit-dev/venturekit.private.git",
+    "directory": "packages/pro/social"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "license": "SEE LICENSE IN ../LICENSE",
+  "licenseHeader": "VentureKit Pro Commercial License — production use requires a valid VentureKit Pro license key. See https://venturekit.dev/pricing.",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./adapters/linkedin": {
+      "import": "./dist/adapters/linkedin.js",
+      "types": "./dist/adapters/linkedin.d.ts"
+    },
+    "./adapters/x": {
+      "import": "./dist/adapters/x.js",
+      "types": "./dist/adapters/x.d.ts"
+    },
+    "./adapters/facebook": {
+      "import": "./dist/adapters/facebook.js",
+      "types": "./dist/adapters/facebook.d.ts"
+    },
+    "./adapters/instagram": {
+      "import": "./dist/adapters/instagram.js",
+      "types": "./dist/adapters/instagram.d.ts"
+    }
+  },
+  "keywords": [
+    "venturekit",
+    "saas",
+    "social",
+    "linkedin",
+    "twitter",
+    "meta",
+    "publishing"
+  ],
+  "dependencies": {
+    "@venturekit/core": "0.0.0-dev.20260602192622"
+  },
+  "peerDependencies": {
+    "@venturekit/data": "0.0.0-dev.20260602192622"
+  },
+  "peerDependenciesMeta": {
+    "@venturekit/data": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "@venturekit/data": "0.0.0-dev.20260602192622",
+    "typescript": "^5.3.0"
+  },
+  "scripts": {
+    "build": "tsc && node -e \"require('fs').cpSync('src/migrations','dist/migrations',{recursive:true})\"",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist"
+  }
+}

package/src/migrations/vk_social_0001_init.sql

@@ -0,0 +1,121 @@
+-- @venturekit-pro/social — initial schema.
+--
+-- Two tables:
+--
+--   social_platforms        — platform-admin-owned catalog of every
+--                             social network the package supports.
+--                             One row per (provider, adapter version).
+--                             The four v1 platforms are seeded by the
+--                             bottom of this migration.
+--
+--   tenant_social_platforms — per-tenant enable/disable + author-ref
+--                             pointer. NO cadence / fan-out / locale
+--                             fields here — those are calling-app
+--                             concerns. Apps that want per-platform
+--                             cadence settings model that in their
+--                             own schema.
+--
+-- Append-only fields are not used here; the rows are tenant-mutable
+-- (toggle enabled, swap author_ref). Audit-worthy changes flow into
+-- `@venturekit-pro/audit`'s `audit_events` separately.
+
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+
+-- ─── social_platforms (catalog) ─────────────────────────────────────
+
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_type WHERE typname = 'vk_social_platform_status') THEN
+    CREATE TYPE vk_social_platform_status AS ENUM (
+      'available',
+      'deprecated',
+      'disabled'
+    );
+  END IF;
+END
+$$;
+
+CREATE TABLE IF NOT EXISTS social_platforms (
+  key            varchar(64)               PRIMARY KEY,
+  display_name   varchar(255)              NOT NULL,
+  -- Lifecycle: `available` rows render in pickers; `deprecated` ones
+  -- are still callable but the UI nudges a swap; `disabled` rows
+  -- refuse to publish at the adapter resolution boundary.
+  status         vk_social_platform_status NOT NULL DEFAULT 'available',
+  -- Human-readable description for picker rows.
+  description    text,
+  -- Free-form metadata (icon name, brand color, etc). Apps consume
+  -- this for UI rendering without the package needing to enumerate
+  -- every visual property.
+  meta           jsonb                     NOT NULL DEFAULT '{}'::jsonb,
+  -- When the row was first introduced + lifecycle timestamps. Used
+  -- by the platform-admin UI to render badges.
+  introduced_at  timestamptz               NOT NULL DEFAULT now(),
+  deprecated_at  timestamptz,
+  disabled_at    timestamptz,
+  created_at     timestamptz               NOT NULL DEFAULT now(),
+  updated_at     timestamptz               NOT NULL DEFAULT now()
+);
+
+-- ─── tenant_social_platforms (per-tenant) ───────────────────────────
+--
+-- Apps that want per-platform-per-tenant settings (cadence, locales,
+-- fan-out weeks) extend THIS table in their own migration. We keep
+-- the package-owned columns to the strict minimum: enabled flag,
+-- author ref (the platform-side id we publish into), and optional
+-- vendor metadata.
+
+CREATE TABLE IF NOT EXISTS tenant_social_platforms (
+  tenant_id        uuid                     NOT NULL,
+  platform_key     varchar(64)              NOT NULL REFERENCES social_platforms(key) ON DELETE RESTRICT,
+  enabled          boolean                  NOT NULL DEFAULT TRUE,
+  -- Platform-side identifier this tenant publishes to. URN / page id /
+  -- ig user id. Required when enabled = TRUE; the application enforces
+  -- that invariant at the service boundary (we don't put a CHECK here
+  -- because the empty string is sometimes used as a placeholder
+  -- during onboarding wizards).
+  author_ref       varchar(512)             NOT NULL DEFAULT '',
+  -- Free-form metadata stamped by the tenant ops flow (locale,
+  -- scopes, etc). Adapters ignore unless documented.
+  meta             jsonb                    NOT NULL DEFAULT '{}'::jsonb,
+  created_at       timestamptz              NOT NULL DEFAULT now(),
+  updated_at       timestamptz              NOT NULL DEFAULT now(),
+  PRIMARY KEY (tenant_id, platform_key)
+);
+
+CREATE INDEX IF NOT EXISTS tenant_social_platforms_enabled_idx
+  ON tenant_social_platforms (tenant_id)
+  WHERE enabled;
+
+-- ─── Catalog seed ───────────────────────────────────────────────────
+--
+-- Idempotent (ON CONFLICT DO NOTHING) so re-running the migration on
+-- an already-seeded DB is a no-op. Tenants who want to add custom
+-- adapters (e.g. Mastodon, Bluesky) insert their own row at app boot.
+
+INSERT INTO social_platforms (key, display_name, description, meta) VALUES
+  (
+    'linkedin',
+    'LinkedIn',
+    'Professional network. UGC Posts API (v2). Author URN required.',
+    jsonb_build_object('iconKey', 'linkedin', 'brandColor', '#0A66C2')
+  ),
+  (
+    'x',
+    'X',
+    'Microblogging (formerly Twitter). v2 Tweets API. 280-char body.',
+    jsonb_build_object('iconKey', 'x', 'brandColor', '#000000')
+  ),
+  (
+    'facebook',
+    'Facebook',
+    'Meta Graph API for Pages. Page access token required.',
+    jsonb_build_object('iconKey', 'facebook', 'brandColor', '#1877F2')
+  ),
+  (
+    'instagram',
+    'Instagram',
+    'Meta Graph Content Publishing API (Business / Creator accounts).',
+    jsonb_build_object('iconKey', 'instagram', 'brandColor', '#E4405F')
+  )
+ON CONFLICT (key) DO NOTHING;