@volter/twin-linkedin 0.1.0

package/dist/client/linkedin-mirror.d.ts

@@ -0,0 +1,43 @@
+import { type LiRow, type MirrorOrg } from '../src/linkedin-mirror-ui.js';
+/** The org's logo: the image its logoV2 names (resolved to a downloadUrl), else linkedin.com's
+ *  building placeholder. */
+export declare function OrgLogo({ src, name, size }: {
+    src?: string;
+    name?: string;
+    size?: number;
+}): import("react").JSX.Element;
+export declare function Commentary({ text, clamp }: {
+    text: unknown;
+    clamp?: boolean;
+}): import("react").JSX.Element;
+/** A post's asset, resolved through the Images / Videos API it names. */
+type Resolved = {
+    kind: 'image' | 'video';
+    asset: LiRow;
+} | {
+    kind: 'article';
+    thumb?: LiRow;
+} | {
+    kind: 'missing';
+    why: string;
+};
+export declare function VideoPlayer({ asset, title }: {
+    asset: LiRow;
+    title?: string;
+}): import("react").JSX.Element;
+export declare function PostMedia({ post, resolved }: {
+    post: LiRow;
+    resolved: Resolved | null;
+}): import("react").JSX.Element | null;
+type Org = MirrorOrg;
+export declare function PostCard({ post, org, nowMs, resolved, full }: {
+    post: LiRow;
+    org: Org;
+    nowMs: number;
+    resolved: Resolved | null;
+    full?: boolean;
+}): import("react").JSX.Element;
+export declare function CompanyHeader({ org }: {
+    org: Org;
+}): import("react").JSX.Element;
+export {};

package/dist/client/linkedin-mirror.js

@@ -0,0 +1,393 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// LinkedIn mirror — React/TSX client. linkedin.com's own view of the twin's state: sign in as the
+// page's admin, see the company page (header, follower line, Posts feed) and a single post. Every
+// read is the twin's OWN LinkedIn API on the same origin; nothing is kept but the signed-in email and
+// token, in the tab's sessionStorage.
+import { createRoot } from 'react-dom/client';
+import { useCallback, useEffect, useState } from 'react';
+import { commentarySegments, followerLine, mediaKind, MIRROR_VERSION, needsFold, orgFromReads, postRoute, postsQuery, relativeTime, sourceHost, } from "../src/linkedin-mirror-ui.js";
+// WHERE THIS MIRROR LIVES. At a vendor root the base is '' (fetches are root-relative); under a
+// World's <base> every read resolves inside that prefix.
+const WIRE_BASE = typeof document === 'undefined' || document.querySelector('base[href]') === null ? '' : new URL('.', document.baseURI).pathname.replace(/\/$/, '');
+const SESSION_EMAIL = 'linkedin-mirror.email';
+const SESSION_TOKEN = 'linkedin-mirror.token';
+function readSession() {
+    if (typeof sessionStorage === 'undefined')
+        return null;
+    const email = sessionStorage.getItem(SESSION_EMAIL);
+    const token = sessionStorage.getItem(SESSION_TOKEN);
+    return email && token ? { email, token } : null;
+}
+// THE WORLD'S CLOCK. A World's twins stamp from the World's instant, which need not be the browser's
+// (a frozen or advanced clock); every answer carries it as its HTTP `Date`, so relative times are drawn
+// against the World's now, never the browser's.
+let worldNowMs = null;
+const currentNow = () => worldNowMs ?? Date.now();
+async function wire(token, path) {
+    const res = await fetch(`${WIRE_BASE}${path}`, {
+        headers: { authorization: `Bearer ${token}`, 'linkedin-version': MIRROR_VERSION, 'x-restli-protocol-version': '2.0.0' },
+    });
+    const served = Date.parse(res.headers.get('date') ?? '');
+    if (Number.isFinite(served))
+        worldNowMs = served;
+    let body = {};
+    try {
+        body = await res.json();
+    }
+    catch {
+        body = {};
+    }
+    return { status: res.status, body };
+}
+const problemText = (w) => String(w.body.message ?? `HTTP ${w.status}`);
+function parseRoute(hash) {
+    const parts = hash.replace(/^#\/?/, '').split('/').filter(Boolean);
+    if (parts[0] === 'login')
+        return { page: 'login' };
+    if (parts[0] === 'company' && parts[1])
+        return { page: 'company', vanity: decodeURIComponent(parts[1]) };
+    if (parts[0] === 'feed' && parts[1] === 'update' && parts[2])
+        return { page: 'post', urn: decodeURIComponent(parts[2]) };
+    return { page: 'home' };
+}
+const go = (path) => { location.hash = `#/${path}`; };
+// ── icons (vendor mirror: linkedin.com's look, drawn here) ──────────────────────────────────────
+function Icon({ d, size = 24, fill = true, className }) {
+    return (_jsx("svg", { className: className, viewBox: "0 0 24 24", width: size, height: size, "aria-hidden": "true", fill: fill ? 'currentColor' : 'none', stroke: fill ? 'none' : 'currentColor', strokeWidth: 1.6, children: d.map((p) => _jsx("path", { d: p }, p)) }));
+}
+const I_HOME = ['M23 9v2h-2v7a3 3 0 01-3 3h-4v-6h-4v6H6a3 3 0 01-3-3v-7H1V9l11-7 5 3.18V2h3v5.09z'];
+const I_NETWORK = ['M12 16v6H3v-6a3 3 0 013-3h3a3 3 0 013 3zm5.5-3A3.5 3.5 0 1014 9.5a3.5 3.5 0 003.5 3.5zm1 2h-2a2.5 2.5 0 00-2.5 2.5V22h7v-4.5a2.5 2.5 0 00-2.5-2.5zM7.5 2A4.5 4.5 0 1012 6.5 4.49 4.49 0 007.5 2z'];
+const I_JOBS = ['M17 6V5a3 3 0 00-3-3h-4a3 3 0 00-3 3v1H2v4a3 3 0 003 3h14a3 3 0 003-3V6zM9 5a1 1 0 011-1h4a1 1 0 011 1v1H9zm10 9a4 4 0 003-1.38V17a3 3 0 01-3 3H5a3 3 0 01-3-3v-4.38A4 4 0 005 14z'];
+const I_MSG = ['M16 4H8a7 7 0 000 14h4v4l8.16-5.39A6.78 6.78 0 0023 11a7 7 0 00-7-7zm-8 8.25A1.25 1.25 0 119.25 11 1.25 1.25 0 018 12.25zm4 0A1.25 1.25 0 1113.25 11 1.25 1.25 0 0112 12.25zm4 0A1.25 1.25 0 1117.25 11 1.25 1.25 0 0116 12.25z'];
+const I_BELL = ['M22 19h-8.28a2 2 0 11-3.44 0H2v-1a4.52 4.52 0 011.17-2.83l1-1.17h15.7l1 1.17A4.42 4.42 0 0122 18zM18.21 7.44A6.27 6.27 0 0012 2a6.27 6.27 0 00-6.21 5.44L5 13h14z'];
+const I_SEARCH = ['M14.56 12.44L11.3 9.18a5.51 5.51 0 10-2.12 2.12l3.26 3.26a1.5 1.5 0 102.12-2.12zM3 6.5A3.5 3.5 0 116.5 10 3.5 3.5 0 013 6.5z'];
+const I_GLOBE = ['M8 1a7 7 0 107 7 7 7 0 00-7-7zM3 8a5 5 0 011-3l.55.55A1.5 1.5 0 015 6.62v1.07a.75.75 0 00.22.53l.56.56a.75.75 0 00.53.22H7v.69a.75.75 0 00.22.53l.56.56a.75.75 0 01.22.53V13a5 5 0 01-5-5zm6.24 4.83l2-2.46a.75.75 0 00.09-.8l-.58-1.16A.76.76 0 0010 8H7v-.19a.51.51 0 01.28-.45l.38-.19a.74.74 0 01.68 0L9 7.5l.38-.7a1 1 0 00.12-.48v-.85a.78.78 0 01.21-.53l1.07-1.09a5 5 0 01-1.54 9z'];
+const I_LIKE = ['M19.46 11l-3.91-3.91a7 7 0 01-1.69-2.74l-.49-1.47A2.76 2.76 0 0010.76 1 2.75 2.75 0 008 3.74v1.12a9.19 9.19 0 00.46 2.85L8.89 9H4.12A2.12 2.12 0 002 11.12a2.16 2.16 0 00.92 1.76A2.11 2.11 0 002 14.62a2.14 2.14 0 001.28 2 2 2 0 00-.28 1 2.12 2.12 0 002 2.12v.14A2.12 2.12 0 007.12 22h7.49a8.08 8.08 0 003.58-.84l.31-.16H21V11zM19 19h-1l-.73.37a6.14 6.14 0 01-2.69.63H7.72a1 1 0 01-1-.72l-.25-.87-.85-.41A1 1 0 015 17l.17-1-.76-.74A1 1 0 014.27 14l.66-1.09-.73-1.1a.49.49 0 01.08-.7.48.48 0 01.34-.11h7.05l-1.31-3.92A7 7 0 0110 4.86V3.75a.77.77 0 01.75-.75.75.75 0 01.71.51L12 5a9 9 0 002.13 3.5l4.5 4.5H19z'];
+const I_COMMENT = ['M7 9h10v1H7zm0 4h7v-1H7zm16-2a6.78 6.78 0 01-2.84 5.61L12 22v-4H8A7 7 0 018 4h8a7 7 0 017 7zm-2 0a5 5 0 00-5-5H8a5 5 0 000 10h6v2.28L19 15a4.79 4.79 0 002-4z'];
+const I_REPOST = ['M13.96 5H6c-.55 0-1 .45-1 1v10H3V6c0-1.66 1.34-3 3-3h7.96L12 0h2.5L17 4l-2.5 4H12l1.96-3zm.04 14H18c.55 0 1-.45 1-1V8h2v10c0 1.66-1.34 3-3 3h-4l1.96 3H13.5L11 20l2.5-4H16l-2 3z'];
+const I_SEND = ['M21 3L0 10l7.66 4.26L16 8l-6.26 8.34L14 24l7-21z'];
+const I_BACK = ['M9 4l-4.87 7H22v2H4.13L9 20H6.5L1 12l5.5-8z'];
+// ── pieces ───────────────────────────────────────────────────────────────────────────────────────
+function InLogo({ size = 34 }) {
+    return (_jsxs("svg", { className: "in-logo", viewBox: "0 0 34 34", width: size, height: size, "aria-label": "LinkedIn", children: [_jsx("rect", { width: "34", height: "34", rx: "4", fill: "#0a66c2" }), _jsx("path", { fill: "#fff", d: "M7.6 13.2h4.3v13.9H7.6zM9.8 6.3a2.5 2.5 0 110 5 2.5 2.5 0 010-5zM14.6 13.2h4.1v1.9h.1c.6-1.1 2-2.2 4.1-2.2 4.4 0 5.2 2.9 5.2 6.6v7.6h-4.3v-6.8c0-1.6 0-3.7-2.3-3.7s-2.6 1.8-2.6 3.6v6.9h-4.3z" })] }));
+}
+/** The org's logo: the image its logoV2 names (resolved to a downloadUrl), else linkedin.com's
+ *  building placeholder. */
+export function OrgLogo({ src, name, size = 48 }) {
+    if (src)
+        return _jsx("img", { className: "org-logo", src: src, width: size, height: size, alt: name ? `${name} logo` : 'logo' });
+    return (_jsx("div", { className: "org-logo org-logo-empty", style: { width: size, height: size }, "aria-hidden": "true", children: _jsx("svg", { viewBox: "0 0 24 24", width: size * 0.55, height: size * 0.55, children: _jsx("path", { fill: "#a0b4b7", d: "M4 2v20h16V2zm6 17H8v-2h2zm0-4H8v-2h2zm0-4H8V9h2zm0-4H8V5h2zm6 12h-4v-4h4zm0-6h-2v-2h2zm0-4h-2V5h2z" }) }) }));
+}
+export function Commentary({ text, clamp = false }) {
+    const [open, setOpen] = useState(!clamp);
+    const fold = clamp && needsFold(text);
+    return (_jsxs("div", { className: fold && !open ? 'commentary commentary-folded' : 'commentary', children: [_jsx("span", { className: "commentary-text", children: commentarySegments(text).map((s, i) => {
+                    if (s.kind === 'text')
+                        return _jsx("span", { children: s.value }, i);
+                    if (s.kind === 'url')
+                        return _jsx("a", { className: "li-link", href: s.value, target: "_blank", rel: "noreferrer", children: s.value.replace(/^https?:\/\//, '') }, i);
+                    if (s.kind === 'mention')
+                        return _jsx("span", { className: "li-link li-mention", children: s.value }, i);
+                    return _jsx("span", { className: "li-link li-hashtag", children: s.value }, i);
+                }) }), fold && !open ? _jsx("button", { className: "see-more", onClick: (e) => { e.stopPropagation(); setOpen(true); }, children: "\u2026more" }) : null] }));
+}
+function useAsset(token, post, reloadKey) {
+    const [resolved, setResolved] = useState(null);
+    const kind = mediaKind(post);
+    const id = kind === 'article' ? post.content?.article?.thumbnail : post.content?.media?.id;
+    useEffect(() => {
+        let live = true;
+        if (!kind) {
+            setResolved(null);
+            return;
+        }
+        if (typeof id !== 'string') {
+            setResolved(kind === 'article' ? { kind: 'article' } : null);
+            return;
+        }
+        const path = id.startsWith('urn:li:video:') ? `/rest/videos/${encodeURIComponent(id)}` : `/rest/images/${encodeURIComponent(id)}`;
+        const read = async () => {
+            // one read: a video still PROCESSING shows as being processed, as linkedin.com's player does
+            const w = await wire(token, path);
+            if (!live)
+                return;
+            if (w.status !== 200) {
+                setResolved({ kind: 'missing', why: problemText(w) });
+                return;
+            }
+            if (kind === 'article')
+                setResolved({ kind: 'article', thumb: w.body });
+            else
+                setResolved({ kind: kind, asset: w.body });
+        };
+        void read();
+        return () => { live = false; };
+    }, [token, kind, id, reloadKey]);
+    return resolved;
+}
+export function VideoPlayer({ asset, title }) {
+    const [started, setStarted] = useState(false);
+    const ratio = Number(asset.aspectRatioWidth) > 0 && Number(asset.aspectRatioHeight) > 0 ? `${asset.aspectRatioWidth} / ${asset.aspectRatioHeight}` : '16 / 9';
+    if (asset.status !== 'AVAILABLE' || typeof asset.downloadUrl !== 'string') {
+        return _jsx("div", { className: "media-pending", style: { aspectRatio: ratio }, children: "Your video is being processed" });
+    }
+    // linkedin.com's player before it plays: the poster (the uploaded thumbnail, or the system one) and
+    // a centred play button; once started, the player's own controls.
+    const start = (e) => {
+        e.stopPropagation();
+        const el = e.currentTarget.closest('.media')?.querySelector('video');
+        setStarted(true);
+        void el?.play().catch(() => undefined);
+    };
+    return (_jsxs("div", { className: "media media-video-wrap", onClick: (e) => e.stopPropagation(), children: [_jsx("video", { className: "media-video", style: { aspectRatio: ratio }, src: asset.downloadUrl, poster: typeof asset.thumbnail === 'string' ? asset.thumbnail : undefined, controls: started, playsInline: true, preload: "metadata", "aria-label": title ?? 'Video', "data-video-urn": String(asset.id) }), !started ? (_jsx("button", { className: "media-play", "aria-label": "Play video", onClick: start, children: _jsx("svg", { viewBox: "0 0 24 24", width: "36", height: "36", "aria-hidden": "true", children: _jsx("path", { d: "M8 5v14l11-7z", fill: "currentColor" }) }) })) : null] }));
+}
+export function PostMedia({ post, resolved }) {
+    const kind = mediaKind(post);
+    if (!kind)
+        return null;
+    if (kind === 'article') {
+        const a = post.content.article;
+        const thumb = resolved && resolved.kind === 'article' ? resolved.thumb : undefined;
+        return (_jsxs("a", { className: "article", href: String(a.source), target: "_blank", rel: "noreferrer", onClick: (e) => e.stopPropagation(), children: [thumb && typeof thumb.downloadUrl === 'string' ? _jsx("img", { className: "article-thumb", src: thumb.downloadUrl, alt: String(a.thumbnailAltText ?? '') }) : null, _jsxs("div", { className: "article-meta", children: [_jsx("div", { className: "article-title", children: String(a.title ?? a.source) }), _jsx("div", { className: "article-source", children: sourceHost(a.source) })] })] }));
+    }
+    if (!resolved)
+        return _jsx("div", { className: "media-loading" });
+    if (resolved.kind === 'missing')
+        return _jsxs("div", { className: "media-pending", children: ["This media is unavailable (", resolved.why, ")"] });
+    if (resolved.kind === 'video')
+        return _jsx(VideoPlayer, { asset: resolved.asset, title: post.content?.media?.title });
+    if (resolved.kind === 'image' && typeof resolved.asset.downloadUrl === 'string') {
+        return _jsx("div", { className: "media", children: _jsx("img", { className: "media-img", src: resolved.asset.downloadUrl, alt: String(post.content?.media?.altText ?? 'Image') }) });
+    }
+    return null;
+}
+export function PostCard({ post, org, nowMs, resolved, full = false }) {
+    return (_jsxs("article", { className: "card post", "data-post-urn": String(post.id), onClick: () => { if (!full)
+            location.hash = postRoute(String(post.id)); }, children: [_jsxs("header", { className: "post-head", children: [_jsx(OrgLogo, { src: org.logoUrl, name: org.name, size: 48 }), _jsxs("div", { className: "post-actor", children: [_jsx("a", { className: "post-actor-name", href: `#/company/${encodeURIComponent(org.vanity)}`, onClick: (e) => e.stopPropagation(), children: org.name }), typeof org.followers === 'number' ? _jsx("div", { className: "post-actor-sub", children: followerLine(org.followers) }) : null, _jsxs("div", { className: "post-actor-sub", children: [_jsx("span", { children: relativeTime(post.publishedAt ?? post.createdAt, nowMs) }), _jsx("span", { className: "dot", "aria-hidden": "true", children: "\u2022" }), _jsx("span", { className: "globe", title: post.visibility === 'PUBLIC' ? 'Visible to anyone on or off LinkedIn' : 'Visible to members', children: _jsx(Icon, { d: I_GLOBE, size: 16 }) })] })] }), _jsx("button", { className: "follow-link", onClick: (e) => e.stopPropagation(), children: "+ Follow" })] }), _jsx(Commentary, { text: post.commentary, clamp: !full }), _jsx(PostMedia, { post: post, resolved: resolved }), _jsxs("div", { className: "social-bar", children: [_jsxs("button", { className: "social-action", children: [_jsx(Icon, { d: I_LIKE, size: 20 }), _jsx("span", { children: "Like" })] }), _jsxs("button", { className: "social-action", children: [_jsx(Icon, { d: I_COMMENT, size: 20 }), _jsx("span", { children: "Comment" })] }), _jsxs("button", { className: "social-action", children: [_jsx(Icon, { d: I_REPOST, size: 20 }), _jsx("span", { children: "Repost" })] }), _jsxs("button", { className: "social-action", children: [_jsx(Icon, { d: I_SEND, size: 20 }), _jsx("span", { children: "Send" })] })] })] }));
+}
+function LivePostCard({ session, post, org, nowMs, reloadKey, full }) {
+    const resolved = useAsset(session.token, post, reloadKey);
+    void nowMs;
+    return _jsx(PostCard, { post: post, org: org, nowMs: currentNow(), resolved: resolved, full: full });
+}
+export function CompanyHeader({ org }) {
+    return (_jsxs("section", { className: "card company", children: [_jsx("div", { className: "cover" }), _jsxs("div", { className: "company-body", children: [_jsx("div", { className: "company-logo", children: _jsx(OrgLogo, { src: org.logoUrl, name: org.name, size: 104 }) }), _jsx("h1", { className: "company-name", children: org.name }), org.description ? _jsx("div", { className: "company-tagline", children: org.description.split('\n')[0] }) : null, _jsxs("div", { className: "company-meta", children: [org.website ? _jsx("span", { children: sourceHost(org.website) || org.website }) : null, org.website && typeof org.followers === 'number' ? _jsx("span", { "aria-hidden": "true", children: " \u00B7 " }) : null, typeof org.followers === 'number' ? _jsx("span", { className: "company-followers", children: followerLine(org.followers) }) : null] }), _jsxs("div", { className: "company-actions", children: [_jsx("button", { className: "btn-primary", children: "+ Follow" }), org.website ? _jsx("a", { className: "btn-secondary", href: org.website, target: "_blank", rel: "noreferrer", children: "Visit website \u2197" }) : null, _jsx("button", { className: "btn-secondary", children: "Message" })] })] }), _jsxs("nav", { className: "company-tabs", children: [_jsx("span", { className: "company-tab", children: "Home" }), _jsx("span", { className: "company-tab", children: "About" }), _jsx("span", { className: "company-tab active", children: "Posts" }), _jsx("span", { className: "company-tab", children: "Jobs" }), _jsx("span", { className: "company-tab", children: "People" })] })] }));
+}
+/** A page by vanity name, with its logo, follower count and (for its admin) description. */
+function useOrg(session, vanity, reloadKey) {
+    const [org, setOrg] = useState(null);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        if (!vanity)
+            return;
+        let live = true;
+        setOrg(null);
+        setError(null);
+        void (async () => {
+            const found = await wire(session.token, `/rest/organizations?q=vanityName&vanityName=${encodeURIComponent(vanity)}`);
+            const pub = Array.isArray(found.body.elements) ? found.body.elements[0] : undefined;
+            if (!live)
+                return;
+            if (found.status !== 200 || !pub) {
+                setError(found.status === 200 ? 'This page doesn’t exist' : problemText(found));
+                return;
+            }
+            const urn = `urn:li:organization:${pub.id}`;
+            const [admin, size, logo] = await Promise.all([
+                wire(session.token, `/rest/organizations/${pub.id}`),
+                wire(session.token, `/rest/networkSizes/${encodeURIComponent(urn)}?edgeType=COMPANY_FOLLOWED_BY_MEMBER`),
+                typeof pub.logoV2?.original === 'string' ? wire(session.token, `/rest/images/${encodeURIComponent(pub.logoV2.original)}`) : Promise.resolve(null),
+            ]);
+            if (!live)
+                return;
+            setOrg(orgFromReads(pub, admin.status === 200 ? admin.body : null, size.status === 200 ? size.body : null, logo && logo.status === 200 ? logo.body : null));
+        })();
+        return () => { live = false; };
+    }, [session.token, vanity, reloadKey]);
+    return { org, error };
+}
+function CompanyScreen({ session, vanity, nowMs, reloadKey }) {
+    const { org, error } = useOrg(session, vanity, reloadKey);
+    const [posts, setPosts] = useState([]);
+    const [next, setNext] = useState(null);
+    const [feedError, setFeedError] = useState(null);
+    const load = useCallback(async (start, prev) => {
+        if (!org)
+            return;
+        const w = await wire(session.token, postsQuery(org.urn, start));
+        if (w.status !== 200) {
+            setFeedError(problemText(w));
+            return;
+        }
+        if (!Array.isArray(w.body.elements)) {
+            setFeedError('LinkedIn answered the feed without its posts.');
+            return;
+        }
+        const rows = w.body.elements;
+        setPosts([...prev, ...rows]);
+        const more = Array.isArray(w.body.paging?.links) && w.body.paging.links.some((l) => l.rel === 'next');
+        setNext(more ? start + rows.length : null);
+    }, [org, session.token]);
+    useEffect(() => { setPosts([]); setNext(null); setFeedError(null); void load(0, []); }, [load, reloadKey]);
+    if (error)
+        return _jsx("div", { className: "card empty", children: _jsx("h2", { children: error }) });
+    if (!org)
+        return _jsx("div", { className: "card loading" });
+    // linkedin.com's Posts tab is the page's feed: posts distributed to the main feed.
+    const feed = posts.filter((p) => p.distribution?.feedDistribution !== 'NONE');
+    return (_jsxs(_Fragment, { children: [_jsx(CompanyHeader, { org: org }), _jsxs("div", { className: "feed-sort", children: ["Sort by: ", _jsx("strong", { children: "Recent" })] }), feedError ? _jsx("div", { className: "card empty", children: feedError }) : null, feed.length === 0 && !feedError ? _jsxs("div", { className: "card empty", children: [_jsx("h2", { children: "No posts yet" }), _jsxs("p", { children: ["When ", org.name, " shares a post, it will appear here."] })] }) : null, feed.map((p) => _jsx(LivePostCard, { session: session, post: p, org: org, nowMs: nowMs, reloadKey: reloadKey }, String(p.id))), next !== null ? _jsx("button", { className: "show-more", onClick: () => void load(next, posts), children: "Show more results" }) : null] }));
+}
+function PostScreen({ session, urn, nowMs, reloadKey }) {
+    const [w, setW] = useState(null);
+    const [vanity, setVanity] = useState(null);
+    const [orgError, setOrgError] = useState(null);
+    useEffect(() => {
+        setW(null);
+        setOrgError(null);
+        void wire(session.token, `/rest/posts/${encodeURIComponent(urn)}`).then(async (got) => {
+            setW(got);
+            const author = got.body.author;
+            if (got.status === 200 && typeof author === 'string') {
+                // organizationsLookup needs no admin role: any member who can read the post can see its page
+                const id = author.split(':').pop() ?? '';
+                const org = await wire(session.token, `/rest/organizationsLookup?ids=List(${id})`);
+                const found = org.status === 200 ? org.body.results?.[id] : undefined;
+                if (found && typeof found.vanityName === 'string')
+                    setVanity(found.vanityName);
+                else
+                    setOrgError(org.status === 200 ? String(org.body.errors?.[id]?.message ?? 'This page is unavailable') : problemText(org));
+            }
+        });
+    }, [urn, session.token, reloadKey]);
+    const { org, error } = useOrg(session, vanity, reloadKey);
+    if (w === null)
+        return _jsx("div", { className: "card loading" });
+    if (w.status !== 200)
+        return _jsxs("div", { className: "card empty", children: [_jsx("h2", { children: "This post cannot be displayed" }), _jsx("p", { children: problemText(w) })] });
+    if (error)
+        return _jsxs("div", { className: "card empty", children: [_jsx("h2", { children: "This post cannot be displayed" }), _jsx("p", { children: error })] });
+    if (orgError)
+        return _jsxs("div", { className: "card empty", children: [_jsx("h2", { children: "This post cannot be displayed" }), _jsx("p", { children: orgError })] });
+    if (!org)
+        return _jsx("div", { className: "card loading" });
+    return (_jsxs(_Fragment, { children: [_jsxs("button", { className: "back-link", onClick: () => history.back(), children: [_jsx(Icon, { d: I_BACK, size: 16 }), " Back"] }), _jsx(LivePostCard, { session: session, post: w.body, org: org, nowMs: nowMs, reloadKey: reloadKey, full: true })] }));
+}
+/** Where a signed-in page member lands: the first page they hold an approved posting role on
+ *  (an ADMINISTRATOR, a CONTENT_ADMINISTRATOR or a DIRECT_SPONSORED_CONTENT_POSTER). */
+const POSTING_ROLES = ['ADMINISTRATOR', 'CONTENT_ADMINISTRATOR', 'DIRECT_SPONSORED_CONTENT_POSTER'];
+function HomeScreen({ session }) {
+    const [msg, setMsg] = useState(null);
+    useEffect(() => {
+        void (async () => {
+            const acls = await wire(session.token, '/rest/organizationAcls?q=roleAssignee&state=APPROVED');
+            if (acls.status !== 200) {
+                setMsg(problemText(acls));
+                return;
+            }
+            const rows = Array.isArray(acls.body.elements) ? acls.body.elements : [];
+            const first = POSTING_ROLES.map((role) => rows.find((r) => r.role === role)).find((r) => r !== undefined);
+            if (!first) {
+                setMsg('You don’t manage any LinkedIn Page yet.');
+                return;
+            }
+            // organizationsLookup needs no admin role, so a content admin finds their page as an admin does
+            const id = String(first.organization ?? first.organizationTarget).split(':').pop() ?? '';
+            const org = await wire(session.token, `/rest/organizationsLookup?ids=List(${id})`);
+            const found = org.status === 200 ? org.body.results?.[id] : undefined;
+            if (!found || typeof found.vanityName !== 'string') {
+                setMsg(org.status === 200 ? String(org.body.errors?.[id]?.message ?? 'This page is unavailable') : problemText(org));
+                return;
+            }
+            location.replace(`#/company/${encodeURIComponent(found.vanityName)}`);
+        })();
+    }, [session.token]);
+    return msg ? _jsx("div", { className: "card empty", children: _jsx("h2", { children: msg }) }) : _jsx("div", { className: "card loading" });
+}
+// ── sign-in: linkedin.com's two-step sign-in, the password leg being the twin-issued token ────────
+function LoginScreen({ onSignedIn }) {
+    const [step, setStep] = useState('email');
+    const [email, setEmail] = useState('');
+    const [token, setToken] = useState('');
+    const [error, setError] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const clean = email.trim();
+    const next = () => {
+        if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(clean)) {
+            setError('Please enter a valid email address.');
+            return;
+        }
+        setError(null);
+        setStep('token');
+    };
+    const signIn = async () => {
+        setBusy(true);
+        const me = await wire(token.trim(), '/v2/userinfo');
+        setBusy(false);
+        if (me.status === 401) {
+            setError('That access token isn’t right. Try again.');
+            return;
+        }
+        if (me.status !== 200) {
+            setError(problemText(me));
+            return;
+        }
+        // Is this token THIS member's? userinfo answers the token's own member; a token for someone else is refused here.
+        if (String(me.body.email ?? '').toLowerCase() !== clean.toLowerCase()) {
+            setError(`That token does not sign in as ${clean}.`);
+            return;
+        }
+        onSignedIn({ email: clean, token: token.trim() });
+    };
+    return (_jsxs("div", { className: "login-page", children: [_jsx("div", { className: "login-top", children: _jsxs("span", { className: "wordmark", children: ["Linked", _jsx(InLogo, { size: 26 })] }) }), _jsxs("div", { className: "login-card", children: [_jsx("h1", { children: "Sign in" }), _jsx("p", { className: "login-sub", children: "Stay updated on your professional world." }), step === 'email' ? (_jsxs("form", { onSubmit: (e) => { e.preventDefault(); next(); }, children: [_jsxs("label", { className: "field", children: [_jsx("input", { autoFocus: true, name: "session_key", placeholder: " ", value: email, onChange: (e) => setEmail(e.target.value), autoComplete: "username" }), _jsx("span", { children: "Email or phone" })] }), error ? _jsx("div", { className: "login-error", role: "alert", children: error }) : null, _jsx("button", { className: "btn-signin", type: "submit", disabled: clean === '', children: "Continue" })] })) : (_jsxs("form", { onSubmit: (e) => { e.preventDefault(); void signIn(); }, children: [_jsxs("div", { className: "login-who", children: [clean, " ", _jsx("button", { type: "button", className: "btn-text", onClick: () => { setStep('email'); setError(null); }, children: "Change" })] }), _jsxs("label", { className: "field", children: [_jsx("input", { autoFocus: true, name: "session_password", type: "password", placeholder: " ", value: token, onChange: (e) => setToken(e.target.value), autoComplete: "current-password" }), _jsx("span", { children: "Access token" })] }), error ? _jsx("div", { className: "login-error", role: "alert", children: error }) : null, _jsx("button", { className: "btn-signin", type: "submit", disabled: token.trim() === '' || busy, children: "Sign in" })] })), _jsxs("p", { className: "login-note", children: ["This twin signs you in with the access token it issued for your account (", _jsx("code", { children: "/_twin/tokens" }), "), in place of a password."] })] })] }));
+}
+function TopNav({ session, onSignOut }) {
+    const initial = session.email[0]?.toUpperCase() ?? '?';
+    const item = (d, label, active = false) => (_jsxs("span", { className: active ? 'nav-item active' : 'nav-item', children: [_jsx(Icon, { d: d, size: 24 }), _jsx("span", { children: label })] }));
+    return (_jsx("header", { className: "topnav", children: _jsxs("div", { className: "topnav-inner", children: [_jsx("a", { href: "#/", "aria-label": "LinkedIn home", children: _jsx(InLogo, {}) }), _jsxs("div", { className: "search", children: [_jsx(Icon, { d: I_SEARCH, size: 16 }), _jsx("input", { placeholder: "Search", "aria-label": "Search" })] }), _jsxs("nav", { className: "nav-items", children: [item(I_HOME, 'Home'), item(I_NETWORK, 'My Network'), item(I_JOBS, 'Jobs'), item(I_MSG, 'Messaging'), item(I_BELL, 'Notifications'), _jsxs("button", { className: "nav-item nav-me", title: `Sign out ${session.email}`, onClick: onSignOut, children: [_jsx("span", { className: "me-avatar", children: initial }), _jsx("span", { children: "Me \u25BE" })] })] })] }) }));
+}
+function App() {
+    const [session, setSession] = useState(readSession);
+    const [route, setRoute] = useState(() => parseRoute(typeof location === 'undefined' ? '' : location.hash));
+    const [nowMs, setNowMs] = useState(() => Date.now());
+    const [reloadKey] = useState(0);
+    useEffect(() => {
+        const onHash = () => { setRoute(parseRoute(location.hash)); setNowMs(Date.now()); window.scrollTo(0, 0); };
+        // a `#/…` link is one of the mirror's own routes; under a World's <base> the browser would resolve it
+        // against the base and leave the shell, so it moves the hash here
+        const onClick = (e) => {
+            const a = e.target?.closest?.('a[href^="#/"]');
+            if (!a || e.defaultPrevented || e.button !== 0 || e.metaKey || e.ctrlKey || e.shiftKey || e.altKey)
+                return;
+            e.preventDefault();
+            location.hash = a.getAttribute('href');
+        };
+        window.addEventListener('hashchange', onHash);
+        document.addEventListener('click', onClick, true);
+        return () => { window.removeEventListener('hashchange', onHash); document.removeEventListener('click', onClick, true); };
+    }, []);
+    const signIn = (s) => {
+        sessionStorage.setItem(SESSION_EMAIL, s.email);
+        sessionStorage.setItem(SESSION_TOKEN, s.token);
+        setSession(s);
+        go('');
+    };
+    const signOut = () => {
+        sessionStorage.removeItem(SESSION_EMAIL);
+        sessionStorage.removeItem(SESSION_TOKEN);
+        setSession(null);
+        go('login');
+    };
+    if (!session || route.page === 'login')
+        return _jsx(LoginScreen, { onSignedIn: signIn });
+    let screen;
+    if (route.page === 'company')
+        screen = _jsx(CompanyScreen, { session: session, vanity: route.vanity, nowMs: nowMs, reloadKey: reloadKey });
+    else if (route.page === 'post')
+        screen = _jsx(PostScreen, { session: session, urn: route.urn, nowMs: nowMs, reloadKey: reloadKey });
+    else
+        screen = _jsx(HomeScreen, { session: session });
+    return (_jsxs("div", { className: "app", children: [_jsx(TopNav, { session: session, onSignOut: signOut }), _jsx("main", { className: route.page === 'post' ? 'main main-narrow' : 'main', children: screen })] }));
+}
+const el = typeof document !== 'undefined' ? document.getElementById('root') : null;
+if (el)
+    createRoot(el).render(_jsx(App, {}));

package/dist/src/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/cli.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { keepProcessAlive } from '@volter/world-core/lifecycle';
+import { hasFlag, optionValue } from '@volter/world-core/args';
+import { createLinkedinTwinServer } from "./linkedin-server.js";
+import { createLinkedinMirrorServer } from "./linkedin-mirror-ui.js";
+const [cmd, ...rest] = process.argv.slice(2);
+const port = Number(optionValue(rest, '--port', '0')) || undefined;
+const root = optionValue(rest, '--root') || undefined;
+const readOnly = hasFlag(rest, '--read-only');
+if (cmd === 'serve') {
+    const server = await createLinkedinTwinServer({ readOnly, ...(root ? { root } : {}), ...(port ? { port } : {}) });
+    process.stdout.write(`linkedin twin${readOnly ? ' [read-only]' : ''} at http://127.0.0.1:${server.port}\n`);
+    await keepProcessAlive();
+}
+else if (cmd === 'mirror') {
+    const s = await createLinkedinMirrorServer({ readOnly, ...(root ? { root } : {}), ...(port ? { port } : {}) });
+    process.stdout.write(`linkedin mirror UI (linkedin.com: sign in, company page, posts, single post) at ${s.url}\n`);
+    await keepProcessAlive();
+}
+else if (cmd === 'conformance') {
+    // Lazy — the conformance module is DEV-ONLY and must not be reachable from the runtime entrypoints.
+    const { checkLinkedinConformance } = await import("./linkedin-conformance.js");
+    const report = await checkLinkedinConformance({ ...(root ? { root } : {}) });
+    process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+    if (!report.ok)
+        process.exitCode = 1;
+}
+else {
+    process.stdout.write('Usage: world-linkedin serve|mirror|conformance [--port N] [--root DIR] [--read-only]\n');
+}

package/dist/src/index.d.ts

@@ -0,0 +1,10 @@
+export { ACTIVE_VERSIONS, handleLinkedinTwinRequest, projectPost, templateHashtags } from './linkedin-twin.js';
+export type { LinkedinRequest } from './linkedin-twin.js';
+export type { LinkedinResponse } from './linkedin-errors.js';
+export { createLinkedinTwinFetch, createLinkedinTwinServer, type LinkedinTwinFetchOptions } from './linkedin-server.js';
+export { budgetedLinkedinExecute, LINKEDIN_VERSION, MAX_PROCESSING_WAIT_MS, performLinkedinAction, performLinkedinActionWithin, postBodyForVendor, syncLinkedinFromReal, syncLinkedinFromRemote, untemplateHashtags, uploadVideoToVendor, } from './linkedin-connector.js';
+export { buildLinkedinMirrorClient, commentarySegments, createLinkedinMirrorServer, followerLine, linkedinMirrorHtml, linkedinMirrorStyles, mediaKind, MIRROR_VERSION, needsFold, postRoute, postsQuery, relativeTime, sourceHost, } from './linkedin-mirror-ui.js';
+export type { LiRow, Segment } from './linkedin-mirror-ui.js';
+export { LINKEDIN_BUDGET_BURST_CEILING, LINKEDIN_BUDGET_CEILING, LINKEDIN_BUDGET_MAX_RETRY_AFTER_S, LINKEDIN_BUDGET_WINDOW_MS, LINKEDIN_CALL_WEIGHTS, LINKEDIN_RATE_BUDGET, LinkedinBudget, LinkedinBudgetError, linkedinBudgetPath, linkedinCallWeight, } from './linkedin-budget.js';
+import { type TwinPack } from '@volter/world-core';
+export declare const pack: TwinPack;

package/dist/src/index.js

@@ -0,0 +1,74 @@
+export { ACTIVE_VERSIONS, handleLinkedinTwinRequest, projectPost, templateHashtags } from "./linkedin-twin.js";
+export { createLinkedinTwinFetch, createLinkedinTwinServer } from "./linkedin-server.js";
+export { budgetedLinkedinExecute, LINKEDIN_VERSION, MAX_PROCESSING_WAIT_MS, performLinkedinAction, performLinkedinActionWithin, postBodyForVendor, syncLinkedinFromReal, syncLinkedinFromRemote, untemplateHashtags, uploadVideoToVendor, } from "./linkedin-connector.js";
+export { buildLinkedinMirrorClient, commentarySegments, createLinkedinMirrorServer, followerLine, linkedinMirrorHtml, linkedinMirrorStyles, mediaKind, MIRROR_VERSION, needsFold, postRoute, postsQuery, relativeTime, sourceHost, } from "./linkedin-mirror-ui.js";
+// The client-side rate budget the perform and refresh adapters charge (linkedin-budget.ts says how the
+// numbers were chosen). The mechanism is the kernel's; these are this vendor's numbers.
+export { LINKEDIN_BUDGET_BURST_CEILING, LINKEDIN_BUDGET_CEILING, LINKEDIN_BUDGET_MAX_RETRY_AFTER_S, LINKEDIN_BUDGET_WINDOW_MS, LINKEDIN_CALL_WEIGHTS, LINKEDIN_RATE_BUDGET, LinkedinBudget, LinkedinBudgetError, linkedinBudgetPath, linkedinCallWeight, } from "./linkedin-budget.js";
+import { registerPack } from '@volter/world-core';
+import { performLinkedinAction, syncLinkedinFromRemote } from "./linkedin-connector.js";
+import { LINKEDIN_RATE_BUDGET as RATE_BUDGET } from "./linkedin-budget.js";
+/**
+ * The api.linkedin.com paths THIS pack serves, as a RegExp SOURCE for the descriptor's `hosts` path
+ * rule: the versioned `/rest` resources an organization posts through, the OpenID userinfo, and the
+ * twin-only control prefix. ANCHORED, so `/rest/postsomething` stays unclaimed; everything else on
+ * api.linkedin.com (ads, analytics, comments, reactions, the legacy /v2 resources) refuses loudly at
+ * the real vendor rather than landing in a twin that cannot serve it.
+ */
+const API_PATHS = '^(?:/rest/(?:posts|images|videos|organizationAcls|organizations|organizationsLookup|networkSizes)(?:/[^/]+)?/?|/v2/userinfo/?)$|^/_twin/';
+export const pack = {
+    vendor: 'linkedin',
+    // The SAME object linkedin-budget.ts declares at module load — one source of truth.
+    rateBudget: RATE_BUDGET,
+    transport: 'rest',
+    // PROTOCOL 2 (docs/contributing/architecture.md#protocol-2-the-pack-is-a-plugin): the pack is a
+    // plugin — its wire, its tree, and its half of the real state system. Born on it.
+    protocol: '2',
+    archetype: 'crud',
+    bin: 'world-linkedin',
+    resources: ['organization', 'member', 'organization_acl', 'token', 'post'],
+    specSource: 'LinkedIn Marketing API docs (learn.microsoft.com/linkedin, li-lms-2026-09), read 2026-09-26: Posts API + Post Schema, Images API, Videos API, Organization Access Control by Role, Organization Lookup (incl. networkSizes), Versioning, Error Responses, Rate Limiting; and Sign In with LinkedIn using OpenID Connect (/v2/userinfo). LinkedIn publishes no machine-readable spec for this surface.',
+    description: "LinkedIn twin — an organization's posts (commentary with one image, one video or an article) through the versioned Posts API, the Images and Videos upload protocols with signed upload URLs, the page's admin roles and follower count, and a linkedin.com company-page mirror; everything else refuses by name.",
+    // A page's posts barely move and LinkedIn's limits are daily: hourly, and on demand.
+    refresh: { every: '1h', webhook: false, onDemand: { atMost: '60s' } },
+    stateSystem: { perform: performLinkedinAction, refresh: syncLinkedinFromRemote },
+    // The round trip: the page, its admin, the admin's role and the token the OAuth leg would have
+    // minted (the vendor has no create-from-nothing for any of them), then a post — minted fresh from
+    // the tree on every send.
+    roundTrip: [
+        { method: 'POST', path: '/_twin/organizations', body: { id: '2414183', localizedName: 'Round Trip Co', vanityName: 'round-trip-co' } },
+        { method: 'POST', path: '/_twin/members', body: { id: 'roundTrip', localizedFirstName: 'Round', localizedLastName: 'Trip', email: 'round.trip@example.com' } },
+        { method: 'POST', path: '/_twin/organizationAcls', body: { organization: 'urn:li:organization:2414183', roleAssignee: 'urn:li:person:roundTrip', role: 'ADMINISTRATOR', state: 'APPROVED' } },
+        { method: 'POST', path: '/_twin/tokens', body: { token: 'round-trip-token', member: 'urn:li:person:roundTrip', scopes: ['w_organization_social', 'r_organization_social', 'rw_organization_admin'] } },
+        {
+            method: 'POST', path: '/rest/posts',
+            headers: { authorization: 'Bearer round-trip-token', 'linkedin-version': '202609', 'x-restli-protocol-version': '2.0.0' },
+            body: { author: 'urn:li:organization:2414183', commentary: 'round trip', visibility: 'PUBLIC', distribution: { feedDistribution: 'MAIN_FEED', targetEntities: [], thirdPartyDistributionChannels: [] }, lifecycleState: 'PUBLISHED', isReshareDisabledByAuthor: false },
+        },
+    ],
+    parityOrigin: 'http://twin',
+    // the write handler and the refresh adapter store the same shape (scripts/shape-parity.test.ts)
+    shapeParity: 'held',
+    // ADOPTION. `linkedin-api-client` is LinkedIn's own JavaScript client ("Official JavaScript client
+    // library for LinkedIn APIs", github.com/linkedin-developers/linkedin-api-js-client), and the
+    // Python client of the same repo family is `linkedin-api-client` on PyPI. LINKEDIN is the stem of
+    // LINKEDIN_ACCESS_TOKEN / LINKEDIN_CLIENT_ID et al.
+    adoption: {
+        sdks: ['linkedin-api-client'],
+        pypi: ['linkedin-api-client'],
+        envStems: ['LINKEDIN'],
+    },
+    // INTERCEPTION. api.linkedin.com for the API (path-scoped: this pack models one slice of it);
+    // www.linkedin.com only for the signed upload URLs (`/dms-uploads/`) the Images and Videos APIs
+    // return — never the site itself; media.licdn.com and dms.licdn.com for the image and video bytes
+    // an asset's downloadUrl names.
+    hosts: [
+        { host: 'api.linkedin.com', pathPattern: API_PATHS },
+        { host: 'www.linkedin.com', pathPattern: '^/dms-uploads/' },
+        { host: 'media.licdn.com', pathPattern: '^/dms/image/' },
+        { host: 'dms.licdn.com', pathPattern: '^/playlist/' },
+    ],
+    endpointEnvNone: "linkedin-api-client takes no base-URL environment variable (its RestliClient builds https://api.linkedin.com/rest URLs from a constant), so a World reaches it through the hosts above; inventing a LINKEDIN_BASE_URL the app never reads would report coverage the app does not have.",
+    browserRouting: { apiPathPrefix: '/rest/', loaderHost: 'https://api.linkedin.com' },
+};
+registerPack(pack);

package/dist/src/linkedin-budget.d.ts

@@ -0,0 +1,36 @@
+import { RateBudget, type RateBudgetDeclaration, type RateBudgetOptions, type RateBudgetReservation, type RateBudgetSnapshot } from '@volter/world-core';
+/** Rolling window, in ms — the longest the kernel's ledger keeps (LinkedIn's own window is a day). */
+export declare const LINKEDIN_BUDGET_WINDOW_MS: number;
+/** Weighted units allowed inside one window: conservative, not transcribed (no figure is published). */
+export declare const LINKEDIN_BUDGET_CEILING = 600;
+/** Weighted units in any 60 s: the kernel fallback's 30, so no burst anchor is required. */
+export declare const LINKEDIN_BUDGET_BURST_CEILING = 30;
+/** Seconds. A Retry-After above this means the member or app is out for the day — fail loudly. */
+export declare const LINKEDIN_BUDGET_MAX_RETRY_AFTER_S = 3600;
+export declare const LINKEDIN_CALL_WEIGHTS: {
+    /** A post or its deletion — the organization speaking, in public. */
+    readonly write: 5;
+    /** initializeUpload / finalizeUpload. */
+    readonly upload: 2;
+    /** A read: a video's status, a finder page, an organization, the ACLs. */
+    readonly read: 1;
+    /** Everything else on the vendor: priced above a read. */
+    readonly other: 2;
+};
+/** THE PACK'S DECLARATION — pure data, the only LinkedIn-specific thing in the whole budget. */
+export declare const LINKEDIN_RATE_BUDGET: RateBudgetDeclaration;
+/** Price one call, keyed `"<METHOD> <path>"` with the query split off and the method upper-cased. */
+export declare function linkedinCallWeight(method: string, path: string): number;
+/** Where this vendor's ledger lives: token-keyed and cwd-independent by default. */
+export declare function linkedinBudgetPath(opts?: {
+    root?: string;
+    token?: string;
+} | string): string;
+export type LinkedinBudgetOptions = Omit<RateBudgetOptions, 'vendor'>;
+/** This vendor's budget — the kernel guard bound to this declaration. */
+export declare class LinkedinBudget extends RateBudget {
+    constructor(opts?: LinkedinBudgetOptions);
+}
+export { RateBudgetError as LinkedinBudgetError } from '@volter/world-core';
+export type LinkedinBudgetReservation = RateBudgetReservation;
+export type LinkedinBudgetSnapshot = RateBudgetSnapshot;