aimeat 2.6.1 → 3.0.0

package/dist/src/services/connections/providers.d.ts

@@ -21,12 +21,17 @@
  *   - findProvider(list, id) / listProviderMeta(list) — lookup + the safe public projection
  * @usage const providers = buildOutboundProviders(config);
  * @version-history
+ *   v1.2.0 — 2026-08-08 — `read-metrics` joins the capability vocabulary, so an app can tell before
+ *     spending a request (and, on X, money) whether a channel will ever report numbers to its
+ *     author. LinkedIn does not carry it, which is the whole point.
+ *   v1.1.0 — 2026-08-02 — Mastodon asks for read:statuses: without it the metric reader 403'd forever,
+ *     so the capability was advertised and could never work.
  *   v1.0.0 — 2026-08-02 — TARGET-057 Phase 1b. Mastodon, YouTube, Bluesky.
  */
 import type { AimeatConfig } from '../../config.js';
 import type { CredentialShape } from '../../models/connection-schemas.js';
 /** Stable provider identifiers. Also the value stored in `Connection.provider`. */
-export type OutboundProviderId = 'mastodon' | 'youtube' | 'bluesky' | 'fake' | 'fake-static';
+export type OutboundProviderId = 'mastodon' | 'youtube' | 'linkedin' | 'x' | 'bluesky' | 'fake' | 'fake-static';
 /**
  * What a user must supply for a provider that has NO authorization round.
  *
@@ -58,8 +63,22 @@ export interface OutboundProvider {
      * per instance and acquired at runtime; `client` is null and `endpoints()` needs the instance.
      */
     instanceScoped: boolean;
-    /** Config-gated. False = absent from discovery and refused at start, with a reason. */
+    /**
+     * Config-gated: this node can serve the provider itself. False = the node holds no client.
+     *
+     * NOT the same as unavailable. A principal who brings their own app can still use a provider the
+     * node never registered, which is exactly what bringing one is for.
+     */
     enabled: boolean;
+    /**
+     * The capability master switch (AIMEAT_CONNECTIONS_ENABLED). False means the whole feature is off
+     * and NOTHING is offered, whoever brought what.
+     *
+     * This used to be encoded only in `disabledReason` as a string, which meant the difference
+     * between "off" and "no client" was a substring match away from being wrong. It is a field now
+     * because the two answers differ: one hides the provider, the other invites you to bring an app.
+     */
+    capabilityOn: boolean;
     /** Why it is disabled, in words an operator can act on. Null when enabled. */
     disabledReason: string | null;
     /** Fixed-endpoint client credentials from config. Null for an instance-scoped provider. */
@@ -71,10 +90,26 @@ export interface OutboundProvider {
     scopes: string[];
     /** Whether to send a PKCE challenge. Always true where the provider supports it. */
     pkce: boolean;
+    /**
+     * WHERE THE CLIENT SECRET GOES at the token endpoint.
+     *
+     * 'body' is the common case and the default. 'basic' is HTTP Basic authentication, which X
+     * REQUIRES for a confidential client: sending its secret in the form body is a 401 with a message
+     * that does not name the cause. This is a field rather than a check on the provider id because
+     * two places mint tokens (the first exchange and every refresh), and a rule that lives in one of
+     * them is a connection that authorises and then cannot renew.
+     */
+    tokenAuth: 'body' | 'basic';
     /**
      * What an app may ASK about a connection at this provider (decision K1). An app never reads the
      * provider's own scope vocabulary — it cannot know what those names mean — so it asks a question
      * in AIMEAT's vocabulary and gets a yes or no.
+     *
+     * The vocabulary: `publish-post`, `publish-video`, `read-metrics`. `read-metrics` is here because
+     * an app that cannot ask it has to FIND OUT by calling — which costs a provider request and, on
+     * X, money, to be told what the registry already knew. It also renders a "read the numbers"
+     * button on LinkedIn, where the answer is a permanent refusal: a control that can never work.
+     * A provider carries it exactly when metrics.ts has a reader that can succeed for it.
      */
     capabilities: string[];
     /**
@@ -99,12 +134,28 @@ export interface OutboundProvider {
 /** What discovery may show. Deliberately free of anything an app could not act on. */
 export interface OutboundProviderMeta {
     id: OutboundProviderId;
+    /** False when the node holds no client for it; a principal's own app still works. */
+    nodeConfigured?: boolean;
     label: string;
     instanceScoped: boolean;
     credentialShape: CredentialShape;
     capabilities: string[];
     attachFields: AttachField[] | null;
 }
+/**
+ * Build the token-endpoint request the way THIS provider wants to be asked.
+ *
+ * Two providers, two conventions, one place. RFC 6749 allows either, and X is strict about wanting
+ * the header form: a confidential client that puts its secret in the body gets a 401 whose message
+ * does not mention the secret at all.
+ */
+export declare function tokenRequest(provider: OutboundProvider, client: {
+    clientId: string;
+    clientSecret: string;
+}, fields: Record<string, string>): {
+    headers: Record<string, string>;
+    body: string;
+};
 /**
  * The providers this node offers. Disabled ones are RETURNED rather than filtered, so a route can
  * answer "why can I not connect YouTube" with the reason instead of a bare absence — an operator

package/dist/src/services/connections/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../../src/services/connections/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,kBAAkB,CAAC;IACvB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2FAA2F;IAC3F,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,2EAA2E;IAC3E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oFAAoF;IACpF,IAAI,EAAE,OAAO,CAAC;IACd;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;OAQG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;OAIG;IACH,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACnC,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,CAAC;CAC3D;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;CACpC;AA6MD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAa/E;AAED,8FAA8F;AAC9F,wBAAgB,YAAY,CAC1B,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,GACxC,gBAAgB,GAAG,SAAS,CAE9B;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,CAStF"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../../src/services/connections/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,mFAAmF;AACnF,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,GAAG,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;AAEhH;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,kBAAkB,CAAC;IACvB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;OAOG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2FAA2F;IAC3F,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,2EAA2E;IAC3E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oFAAoF;IACpF,IAAI,EAAE,OAAO,CAAC;IACd;;;;;;;;OAQG;IACH,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;OAQG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;OAIG;IACH,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACnC,+EAA+E;IAC/E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,CAAC;CAC3D;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,kBAAkB,CAAC;IACvB,qFAAqF;IACrF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;CACpC;AA8VD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAClD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAanD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAe/E;AAED,8FAA8F;AAC9F,wBAAgB,YAAY,CAC1B,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,GACxC,gBAAgB,GAAG,SAAS,CAE9B;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,CAmBtF"}

package/dist/src/services/connections/providers.js

@@ -21,6 +21,11 @@
  *   - findProvider(list, id) / listProviderMeta(list) — lookup + the safe public projection
  * @usage const providers = buildOutboundProviders(config);
  * @version-history
+ *   v1.2.0 — 2026-08-08 — `read-metrics` joins the capability vocabulary, so an app can tell before
+ *     spending a request (and, on X, money) whether a channel will ever report numbers to its
+ *     author. LinkedIn does not carry it, which is the whole point.
+ *   v1.1.0 — 2026-08-02 — Mastodon asks for read:statuses: without it the metric reader 403'd forever,
+ *     so the capability was advertised and could never work.
  *   v1.0.0 — 2026-08-02 — TARGET-057 Phase 1b. Mastodon, YouTube, Bluesky.
  */
 /**
@@ -29,18 +34,26 @@
  * `POST /api/v1/apps` with no human in the loop. There is nothing to put in .env because nobody
  * knows which instance the next user arrives from.
  */
-function mastodon(enabled) {
+function mastodon(capabilityOn) {
     return {
         id: 'mastodon',
         label: 'Mastodon',
         credentialShape: 'oauth2',
         instanceScoped: true,
-        enabled,
-        disabledReason: enabled ? null : 'connections capability is off (AIMEAT_CONNECTIONS_ENABLED)',
+        // Mastodon registers itself per instance, so it needs no node client: the capability switch is
+        // the only thing that can turn it off.
+        enabled: capabilityOn,
+        capabilityOn,
+        disabledReason: capabilityOn ? null : 'connections capability is off (AIMEAT_CONNECTIONS_ENABLED)',
         client: null,
-        scopes: ['read:accounts', 'write:statuses', 'write:media'],
+        // read:statuses is what lets an author READ BACK how their own post did. Without it the metric
+        // reader gets a 403 forever — the capability was advertised and could never work, which is the
+        // "the gate is decorative" failure this registry is written against. Connections made before
+        // this was added keep working for publishing and must be reconnected to read numbers.
+        scopes: ['read:accounts', 'read:statuses', 'write:statuses', 'write:media'],
         pkce: true,
-        capabilities: ['publish-post', 'publish-video'],
+        tokenAuth: 'body',
+        capabilities: ['publish-post', 'publish-video', 'read-metrics'],
         attachFields: null,
         // Instances rate-limit, but there is no single daily publish ceiling to state, and inventing
         // one would be a guess wearing a number.
@@ -74,6 +87,7 @@ function youtube(clientId, clientSecret, capabilityOn) {
         credentialShape: 'oauth2',
         instanceScoped: false,
         enabled,
+        capabilityOn,
         disabledReason: enabled
             ? null
             : !capabilityOn
@@ -91,7 +105,8 @@ function youtube(clientId, clientSecret, capabilityOn) {
             'https://www.googleapis.com/auth/youtube.readonly',
         ],
         pkce: true,
-        capabilities: ['publish-video'],
+        tokenAuth: 'body',
+        capabilities: ['publish-video', 'read-metrics'],
         attachFields: null,
         // SIX. Read from the project's own quota page on 2026-08-02, not guessed:
         //
@@ -119,6 +134,133 @@ function youtube(clientId, clientSecret, capabilityOn) {
         },
     };
 }
+/**
+ * LinkedIn.
+ *
+ * IT SHOULD HAVE BEEN IN THE FIRST SLICE. The provider map put it behind a product approval, which
+ * was wrong: "Sign In with LinkedIn (OpenID Connect)" and "Share on LinkedIn" are the Consumer
+ * tier, self-serve, no human review. That error kept the platform that matters most for business
+ * at the back of the queue for the whole build. The mistake was factual, the cost was real.
+ *
+ * TWO THINGS DIFFER FROM THE OTHER OAUTH PROVIDERS and both are handled rather than assumed:
+ *
+ *   NO PKCE. LinkedIn's authorization-code flow does not document a code_challenge, and sending one
+ *   to a server that does not expect it is a way to fail at the consent screen. `pkce: false`.
+ *
+ *   PROBABLY NO REFRESH TOKEN. Programmatic refresh is a gated feature on LinkedIn; a Consumer-tier
+ *   app typically gets a ~60-day access token and nothing to renew it with. That is not a failure
+ *   mode this code has to invent anything for — a session with no refresh token already resolves to
+ *   needs_reauth with a reason the owner can act on. It does mean a LinkedIn connection asks to be
+ *   reconnected a few times a year, and the panel note says so before anyone connects.
+ *
+ * VARMISTETTAVA against a real app: whether a refresh token arrives at all, and the daily call
+ * ceiling (reported as roughly 100/day/member, with no self-serve way to raise it).
+ */
+function linkedin(clientId, clientSecret, capabilityOn) {
+    const configured = Boolean(clientId && clientSecret);
+    const enabled = capabilityOn && configured;
+    return {
+        id: 'linkedin',
+        label: 'LinkedIn',
+        credentialShape: 'oauth2',
+        instanceScoped: false,
+        enabled,
+        capabilityOn,
+        disabledReason: enabled
+            ? null
+            : !capabilityOn
+                ? 'connections capability is off (AIMEAT_CONNECTIONS_ENABLED)'
+                : 'no client credentials (AIMEAT_CONNECT_LINKEDIN_CLIENT_ID / _SECRET)',
+        client: configured ? { id: clientId, secret: clientSecret } : null,
+        // openid+profile identify WHICH member this connection is for, which is what the dedupe key and
+        // the account label are built from. w_member_social is the write. Asking for the write alone and
+        // then reading is the mistake that cost an hour on YouTube.
+        scopes: ['openid', 'profile', 'w_member_social'],
+        pkce: false,
+        tokenAuth: 'body',
+        // Text and images at the Consumer tier. NOT publish-video and NOT a native PDF carousel: the
+        // Documents API sits behind the partner-gated Community Management product, and advertising a
+        // capability the recipe cannot perform is the bug the attach route was already fixed for.
+        // NO read-metrics, and its absence is load-bearing: analytics is behind the same partner gate,
+        // so an app that offered "read the numbers" here would render a button whose only possible
+        // answer is a refusal. A production user pressed it repeatedly and concluded the app was broken.
+        capabilities: ['publish-post'],
+        // Roughly 100 calls a day per member, but that is a per-MEMBER limit rather than a shared pool,
+        // so it is not the kind of ceiling sharedDailyLimit models.
+        sharedDailyLimit: null,
+        attachFields: null,
+        endpoints() {
+            return {
+                authorize: 'https://www.linkedin.com/oauth/v2/authorization',
+                token: 'https://www.linkedin.com/oauth/v2/accessToken',
+                // LinkedIn offers a revocation endpoint; revoking locally alone would be forgetting.
+                revoke: 'https://www.linkedin.com/oauth/v2/revoke',
+            };
+        },
+    };
+}
+/**
+ * X.
+ *
+ * WHY IT IS HERE NOW AND WAS NOT BEFORE. X had no usable free write access; the entry price was a
+ * monthly subscription, which put it out of scope for a node that anyone can run. That changed on
+ * 2026-02-06: the free tier closed to new developers and pay-per-use replaced it, with NO monthly
+ * minimum, prepaid credits, a spend cap the developer sets, and roughly $0.015 per post created.
+ * The blocker was the subscription floor, and the subscription floor is gone.
+ *
+ * THREE THINGS DIFFER FROM THE OTHER OAUTH PROVIDERS:
+ *
+ *   The secret goes in an Authorization header, not the body — see tokenAuth above.
+ *
+ *   PKCE is mandatory rather than optional.
+ *
+ *   offline.access is what makes the connection survive. Without that scope X issues no refresh
+ *   token and the connection dies in two hours. It is the same trap as Google's access_type=offline
+ *   and it is silent in exactly the same way: the authorization succeeds, nothing in the response
+ *   says anything is missing, and the failure arrives hours later.
+ *
+ * COSTS REAL MONEY PER POST, which nothing else in this registry does. The operator's spend cap
+ * lives at X rather than here, and that is the right place for it: a limit this node enforced could
+ * be bypassed by anything else using the same credentials.
+ */
+function x(clientId, clientSecret, capabilityOn) {
+    const configured = Boolean(clientId && clientSecret);
+    const enabled = capabilityOn && configured;
+    return {
+        id: 'x',
+        label: 'X',
+        credentialShape: 'oauth2',
+        instanceScoped: false,
+        enabled,
+        capabilityOn,
+        disabledReason: enabled
+            ? null
+            : !capabilityOn
+                ? 'connections capability is off (AIMEAT_CONNECTIONS_ENABLED)'
+                : 'no client credentials (AIMEAT_CONNECT_X_CLIENT_ID / _SECRET)',
+        client: configured ? { id: clientId, secret: clientSecret } : null,
+        // users.read identifies the account, tweet.write publishes, offline.access keeps it alive.
+        // Dropping any one of the three breaks something that only shows up later.
+        scopes: ['tweet.read', 'tweet.write', 'users.read', 'offline.access'],
+        pkce: true,
+        tokenAuth: 'basic',
+        // Text only for now. Media goes through a separate chunked endpoint with its own processing
+        // wait, and claiming video before that exists is the failure the recipe guard now catches.
+        // read-metrics is real here and it BILLS: public_metrics is charged per read, which is why
+        // nothing on this node reads it on a timer.
+        capabilities: ['publish-post', 'read-metrics'],
+        // Pay-per-use has no daily ceiling to model; the limit is a spend cap set at X.
+        sharedDailyLimit: null,
+        attachFields: null,
+        endpoints() {
+            return {
+                authorize: 'https://x.com/i/oauth2/authorize',
+                token: 'https://api.x.com/2/oauth2/token',
+                revoke: 'https://api.x.com/2/oauth2/revoke',
+            };
+        },
+    };
+}
 /**
  * Bluesky. Present in the first slice specifically because it is NOT oauth2-shaped: an app password
  * exchanged for a session. A store that only ever saw Mastodon and YouTube would be built around
@@ -137,16 +279,18 @@ function bluesky(capabilityOn) {
         credentialShape: 'session',
         instanceScoped: false,
         enabled: capabilityOn,
+        capabilityOn,
         disabledReason: capabilityOn ? null : 'connections capability is off (AIMEAT_CONNECTIONS_ENABLED)',
         // No client credentials at all: the user's app password IS the credential.
         client: null,
         scopes: [],
         pkce: false,
+        tokenAuth: 'body',
         // publish-post ONLY, and publish-video is deliberately absent. Video on Bluesky goes through a
         // separate video service with its own job queue and limits, which is not built. Listing a
         // capability the recipe cannot perform is the same "advertised but unconnectable" mistake the
         // attach route was just fixed for, one field over.
-        capabilities: ['publish-post'],
+        capabilities: ['publish-post', 'read-metrics'],
         sharedDailyLimit: null,
         // The one provider a user hands us a secret for, so it is the one that needs a form.
         attachFields: [
@@ -177,11 +321,13 @@ function fake(baseUrl, capabilityOn) {
         credentialShape: 'oauth2',
         instanceScoped: false,
         enabled,
+        capabilityOn,
         disabledReason: enabled ? null : 'no AIMEAT_CONNECT_FAKE_BASE_URL (this provider is test-only)',
         client: baseUrl ? { id: 'fake-client', secret: 'fake-secret' } : null,
         scopes: ['publish'],
         pkce: true,
-        capabilities: ['publish-video', 'publish-post'],
+        tokenAuth: 'body',
+        capabilities: ['publish-video', 'publish-post', 'read-metrics'],
         sharedDailyLimit: null,
         attachFields: null,
         endpoints() {
@@ -210,10 +356,12 @@ function fakeStatic(baseUrl, capabilityOn) {
         credentialShape: 'session',
         instanceScoped: false,
         enabled,
+        capabilityOn,
         disabledReason: enabled ? null : 'no AIMEAT_CONNECT_FAKE_BASE_URL (this provider is test-only)',
         client: null,
         scopes: [],
         pkce: false,
+        tokenAuth: 'body',
         capabilities: ['publish-post'],
         sharedDailyLimit: null,
         attachFields: [
@@ -223,6 +371,28 @@ function fakeStatic(baseUrl, capabilityOn) {
         endpoints() { return null; },
     };
 }
+/**
+ * Build the token-endpoint request the way THIS provider wants to be asked.
+ *
+ * Two providers, two conventions, one place. RFC 6749 allows either, and X is strict about wanting
+ * the header form: a confidential client that puts its secret in the body gets a 401 whose message
+ * does not mention the secret at all.
+ */
+export function tokenRequest(provider, client, fields) {
+    const body = new URLSearchParams({ ...fields, client_id: client.clientId });
+    const headers = {
+        'Content-Type': 'application/x-www-form-urlencoded',
+        Accept: 'application/json',
+    };
+    if (provider.tokenAuth === 'basic') {
+        const pair = Buffer.from(`${client.clientId}:${client.clientSecret}`).toString('base64');
+        headers.Authorization = `Basic ${pair}`;
+    }
+    else {
+        body.set('client_secret', client.clientSecret);
+    }
+    return { headers, body: body.toString() };
+}
 /**
  * The providers this node offers. Disabled ones are RETURNED rather than filtered, so a route can
  * answer "why can I not connect YouTube" with the reason instead of a bare absence — an operator
@@ -233,6 +403,8 @@ export function buildOutboundProviders(config) {
     const list = [
         mastodon(on),
         youtube(config.connectGoogleClientId, config.connectGoogleClientSecret, on),
+        linkedin(config.connectLinkedinClientId, config.connectLinkedinClientSecret, on),
+        x(config.connectXClientId, config.connectXClientSecret, on),
         bluesky(on),
     ];
     // Appended only when configured, so a production node's list is exactly the three above.
@@ -248,13 +420,23 @@ export function findProvider(providers, id) {
 }
 /** The public projection for discovery. Enabled providers only, and no credentials in it. */
 export function listProviderMeta(providers) {
-    return providers.filter((p) => p.enabled).map((p) => ({
+    return providers
+        // The master switch first: off means nothing is offered, whoever brought what.
+        .filter((p) => p.capabilityOn)
+        // Then: a provider the NODE has no client for is still listed, as long as someone could bring
+        // their own. Hiding it was right when the node's registration was the only way in; now it would
+        // mean the operator's decision not to register an app silently removes a choice from every
+        // user. The `fake` test providers stay out: they are gated on config and have nothing to bring.
+        .filter((p) => p.enabled || (p.credentialShape === 'oauth2' && !p.id.startsWith('fake')))
+        .map((p) => ({
         id: p.id,
         label: p.label,
         instanceScoped: p.instanceScoped,
         credentialShape: p.credentialShape,
         capabilities: p.capabilities,
         attachFields: p.attachFields,
+        /** False means: this node has no client. Bring your own and it works anyway. */
+        nodeConfigured: p.enabled,
     }));
 }
 //# sourceMappingURL=providers.js.map

package/dist/src/services/connections/providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../../src/services/connections/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAuFH;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,OAAgB;IAChC,OAAO;QACL,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,IAAI;QACpB,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D;QAC7F,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC;QAC1D,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC/C,YAAY,EAAE,IAAI;QAClB,6FAA6F;QAC7F,yCAAyC;QACzC,gBAAgB,EAAE,IAAI;QACtB,SAAS,CAAC,QAAQ;YAChB,6FAA6F;YAC7F,sFAAsF;YACtF,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO;gBACL,SAAS,EAAE,GAAG,QAAQ,kBAAkB;gBACxC,KAAK,EAAE,GAAG,QAAQ,cAAc;gBAChC,MAAM,EAAE,GAAG,QAAQ,eAAe;aACnC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,QAAgB,EAAE,YAAoB,EAAE,YAAqB;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,IAAI,UAAU,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,cAAc,EAAE,OAAO;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,YAAY;gBACb,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,mEAAmE;QACzE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,gGAAgG;QAChG,4FAA4F;QAC5F,qFAAqF;QACrF,0FAA0F;QAC1F,+FAA+F;QAC/F,oEAAoE;QACpE,MAAM,EAAE;YACN,gDAAgD;YAChD,kDAAkD;SACnD;QACD,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,CAAC,eAAe,CAAC;QAC/B,YAAY,EAAE,IAAI;QAClB,0EAA0E;QAC1E,EAAE;QACF,8EAA8E;QAC9E,4EAA4E;QAC5E,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,+DAA+D;QAC/D,EAAE;QACF,yFAAyF;QACzF,qFAAqF;QACrF,EAAE;QACF,0FAA0F;QAC1F,0FAA0F;QAC1F,2FAA2F;QAC3F,uFAAuF;QACvF,gBAAgB,EAAE,CAAC;QACnB,SAAS;YACP,OAAO;gBACL,SAAS,EAAE,8CAA8C;gBACzD,KAAK,EAAE,qCAAqC;gBAC5C,MAAM,EAAE,sCAAsC;aAC/C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,YAAqB;IACpC,OAAO;QACL,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,4FAA4F;QAC5F,yFAAyF;QACzF,wEAAwE;QACxE,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,YAAY;QACrB,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D;QAClG,2EAA2E;QAC3E,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,+FAA+F;QAC/F,0FAA0F;QAC1F,8FAA8F;QAC9F,mDAAmD;QACnD,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,qFAAqF;QACrF,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE;YACtF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;SAC9F;QACD,SAAS;YACP,iFAAiF;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,IAAI,CAAC,OAAe,EAAE,YAAqB;IAClD,MAAM,OAAO,GAAG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,eAAe;QACtB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;QAC/F,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QAC/C,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,SAAS;YACP,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,OAAO;gBACL,SAAS,EAAE,GAAG,OAAO,YAAY;gBACjC,KAAK,EAAE,GAAG,OAAO,QAAQ;gBACzB,MAAM,EAAE,GAAG,OAAO,SAAS;aAC5B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe,EAAE,YAAqB;IACxD,MAAM,OAAO,GAAG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,qCAAqC;QAC5C,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;QAC/F,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE;YAC9E,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;SACpD;QACD,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,QAAQ,CAAC,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,CAAC;QAC3E,OAAO,CAAC,EAAE,CAAC;KACZ,CAAC;IACF,yFAAyF;IACzF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAC1B,SAA6B,EAAE,EAAU;IAEzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../../src/services/connections/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAuHH;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,YAAqB;IACrC,OAAO;QACL,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,IAAI;QACpB,+FAA+F;QAC/F,uCAAuC;QACvC,OAAO,EAAE,YAAY;QACrB,YAAY;QACZ,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D;QAClG,MAAM,EAAE,IAAI;QACZ,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,sFAAsF;QACtF,MAAM,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC;QAC3E,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,MAAM;QACjB,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,CAAC;QAC/D,YAAY,EAAE,IAAI;QAClB,6FAA6F;QAC7F,yCAAyC;QACzC,gBAAgB,EAAE,IAAI;QACtB,SAAS,CAAC,QAAQ;YAChB,6FAA6F;YAC7F,sFAAsF;YACtF,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO;gBACL,SAAS,EAAE,GAAG,QAAQ,kBAAkB;gBACxC,KAAK,EAAE,GAAG,QAAQ,cAAc;gBAChC,MAAM,EAAE,GAAG,QAAQ,eAAe;aACnC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,QAAgB,EAAE,YAAoB,EAAE,YAAqB;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,IAAI,UAAU,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,YAAY;QACZ,cAAc,EAAE,OAAO;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,YAAY;gBACb,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,mEAAmE;QACzE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,gGAAgG;QAChG,4FAA4F;QAC5F,qFAAqF;QACrF,0FAA0F;QAC1F,+FAA+F;QAC/F,oEAAoE;QACpE,MAAM,EAAE;YACN,gDAAgD;YAChD,kDAAkD;SACnD;QACD,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,MAAM;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;QAC/C,YAAY,EAAE,IAAI;QAClB,0EAA0E;QAC1E,EAAE;QACF,8EAA8E;QAC9E,4EAA4E;QAC5E,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,+DAA+D;QAC/D,EAAE;QACF,yFAAyF;QACzF,qFAAqF;QACrF,EAAE;QACF,0FAA0F;QAC1F,0FAA0F;QAC1F,2FAA2F;QAC3F,uFAAuF;QACvF,gBAAgB,EAAE,CAAC;QACnB,SAAS;YACP,OAAO;gBACL,SAAS,EAAE,8CAA8C;gBACzD,KAAK,EAAE,qCAAqC;gBAC5C,MAAM,EAAE,sCAAsC;aAC/C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,QAAQ,CAAC,QAAgB,EAAE,YAAoB,EAAE,YAAqB;IAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,IAAI,UAAU,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,YAAY;QACZ,cAAc,EAAE,OAAO;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,YAAY;gBACb,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,qEAAqE;QAC3E,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,gGAAgG;QAChG,iGAAiG;QACjG,4DAA4D;QAC5D,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC;QAChD,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,MAAM;QACjB,6FAA6F;QAC7F,8FAA8F;QAC9F,0FAA0F;QAC1F,+FAA+F;QAC/F,2FAA2F;QAC3F,iGAAiG;QACjG,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,gGAAgG;QAChG,4DAA4D;QAC5D,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,SAAS;YACP,OAAO;gBACL,SAAS,EAAE,iDAAiD;gBAC5D,KAAK,EAAE,+CAA+C;gBACtD,qFAAqF;gBACrF,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,CAAC,CAAC,QAAgB,EAAE,YAAoB,EAAE,YAAqB;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,IAAI,UAAU,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,GAAG;QACV,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,YAAY;QACZ,cAAc,EAAE,OAAO;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,YAAY;gBACb,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,8DAA8D;QACpE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,2FAA2F;QAC3F,2EAA2E;QAC3E,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC;QACrE,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,OAAO;QAClB,4FAA4F;QAC5F,2FAA2F;QAC3F,2FAA2F;QAC3F,4CAA4C;QAC5C,YAAY,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QAC9C,gFAAgF;QAChF,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,SAAS;YACP,OAAO;gBACL,SAAS,EAAE,kCAAkC;gBAC7C,KAAK,EAAE,kCAAkC;gBACzC,MAAM,EAAE,mCAAmC;aAC5C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,YAAqB;IACpC,OAAO;QACL,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,4FAA4F;QAC5F,yFAAyF;QACzF,wEAAwE;QACxE,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,YAAY;QACrB,YAAY;QACZ,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D;QAClG,2EAA2E;QAC3E,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,MAAM;QACjB,+FAA+F;QAC/F,0FAA0F;QAC1F,8FAA8F;QAC9F,mDAAmD;QACnD,YAAY,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QAC9C,gBAAgB,EAAE,IAAI;QACtB,qFAAqF;QACrF,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE;YACtF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;SAC9F;QACD,SAAS;YACP,iFAAiF;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,IAAI,CAAC,OAAe,EAAE,YAAqB;IAClD,MAAM,OAAO,GAAG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,eAAe;QACtB,eAAe,EAAE,QAAQ;QACzB,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,YAAY;QACZ,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;QAC/F,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC;QACnB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,MAAM;QACjB,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;QAC/D,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,SAAS;YACP,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,OAAO;gBACL,SAAS,EAAE,GAAG,OAAO,YAAY;gBACjC,KAAK,EAAE,GAAG,OAAO,QAAQ;gBACzB,MAAM,EAAE,GAAG,OAAO,SAAS;aAC5B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe,EAAE,YAAqB;IACxD,MAAM,OAAO,GAAG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,qCAAqC;QAC5C,eAAe,EAAE,SAAS;QAC1B,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,YAAY;QACZ,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;QAC/F,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,MAAM;QACjB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE;YAC9E,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;SACpD;QACD,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,QAA0B,EAC1B,MAAkD,EAClD,MAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,CAAC,aAAa,GAAG,SAAS,IAAI,EAAE,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,QAAQ,CAAC,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,CAAC;QAC3E,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,2BAA2B,EAAE,EAAE,CAAC;QAChF,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC;KACZ,CAAC;IACF,yFAAyF;IACzF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAC1B,SAA6B,EAAE,EAAU;IAEzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,SAA6B;IAC5D,OAAO,SAAS;QACd,+EAA+E;SAC9E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9B,8FAA8F;QAC9F,gGAAgG;QAChG,2FAA2F;QAC3F,gGAAgG;SAC/F,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;SACxF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,gFAAgF;QAChF,cAAc,EAAE,CAAC,CAAC,OAAO;KAC1B,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/src/services/connections/publish-gate.d.ts

@@ -15,9 +15,17 @@
  *
  *   A FULL QUOTA IS NOT A FAILURE. It queues, with a reason. So does moderation. Reporting either as
  *   an error teaches an app to retry, which is the one response that makes both worse.
- * @structure buildIdempotencyKey · openPublish · quotaStatus
+ *
+ *   AND NEITHER IS A FAILURE PERMANENT. The guard prevents a double post; a row that published
+ *   nothing cannot become one. Without claimDeadAttempt() the key — derived from the message —
+ *   makes one failure final: every retry of that caption collides with its own dead row and is
+ *   answered "already sent", pointing at an attempt nobody ever received.
+ * @structure buildIdempotencyKey · claimDeadAttempt · openPublish · openOwnPublish · quotaStatus
  * @usage import { openPublish } from './publish-gate.js';
  * @version-history
+ *   v1.1.0 — 2026-08-08 — A failed, rejected or long-abandoned attempt no longer locks its own
+ *     message out of ever being sent again (found in production: LÄHETIN answered "already sent"
+ *     and showed an empty result for a post that had never left the node).
  *   v1.0.0 — 2026-08-02 — TARGET-057 Phase 1d.
  */
 import type { Storage } from '../../storage/interface.js';

package/dist/src/services/connections/publish-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-gate.d.ts","sourceRoot":"","sources":["../../../../src/services/connections/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EACnD,MAAM,oCAAoC,CAAC;AAK5C,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GACzB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GACC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAC3E,MAAM,CAIR;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxC,OAAO,CAAC,iBAAiB,CAAC,CA+F5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,EACxE,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxC,OAAO,CAAC,iBAAiB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoD1E;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GACtE,OAAO,CAAC,WAAW,CAAC,CAatB"}
+{"version":3,"file":"publish-gate.d.ts","sourceRoot":"","sources":["../../../../src/services/connections/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EACnD,MAAM,oCAAoC,CAAC;AAK5C,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GACzB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GACC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAC3E,MAAM,CAIR;AA2CD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxC,OAAO,CAAC,iBAAiB,CAAC,CAgG5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,EACxE,IAAI,EAAE;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxC,OAAO,CAAC,iBAAiB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuD1E;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GACtE,OAAO,CAAC,WAAW,CAAC,CAatB"}

package/dist/src/services/connections/publish-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish-gate.js","sourceRoot":"","sources":["../../../../src/services/connections/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMrD,sFAAsF;AACtF,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA2B/B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EAAE,YAAoB,EAAE,UAAkB,EAAE,OAAe;IAE5E,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAChE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,GAAmB,EACnB,IAAyC;IAEzC,iGAAiG;IACjG,iGAAiG;IACjG,4CAA4C;IAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACpG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,kDAAkD;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,gGAAgG;QAChG,4DAA4D;QAC5D,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB;YACzC,MAAM,EAAE,oFAAoF;SAC7F,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,+FAA+F;IAC/F,gEAAgE;IAChE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,0FAA0F;YAC1F,+EAA+E;YAC/E,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,UAAU,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB;gBACrC,MAAM,EAAE,sBAAsB,UAAU,CAAC,YAAY,CAAC,KAAK,iBAAiB,UAAU,CAAC,YAAY,CAAC,WAAW,QAAQ;aACxH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,mGAAmG;IACnG,kGAAkG;IAClG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YACpD,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,UAAU,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,GAAG,IAAI,CAAC;IACzD,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CACxC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAC1D,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAE3F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC/C,EAAE,EAAE,IAAI;QACR,cAAc;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM;KACP,CAAC,CAAC;IAEH,8FAA8F;IAC9F,8FAA8F;IAC9F,6CAA6C;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;IAEnC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM;QACN,OAAO;QACP,UAAU;QACV,UAAU;QACV,4EAA4E;QAC5E,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,GAAwE,EACxE,IAAyC;IAEzC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjE,+EAA+E;IAC/E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB;YACzC,MAAM,EAAE,uEAAuE;SAChF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACnC,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAC9C,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,GAAG,IAAI,CAAC;IACnD,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC/C,EAAE,EAAE,IAAI;QACR,cAAc;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,qEAAqE;QACrE,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;KACxC,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI;QAC3B,OAAO;QACP,UAAU;QACV,8FAA8F;QAC9F,uCAAuC;QACvC,UAAU,EAAE,IAAmC;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAAE,YAAoB,EAAE,gBAA+B;IAEvE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;QACtD,YAAY;QACZ,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC/C,KAAK;KACN,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,gBAAgB;QACvB,YAAY;QACZ,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;QAC1F,WAAW,EAAE,mBAAmB;KACjC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"publish-gate.js","sourceRoot":"","sources":["../../../../src/services/connections/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMrD,sFAAsF;AACtF,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA2B/B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EAAE,YAAoB,EAAE,UAAkB,EAAE,OAAe;IAE5E,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAChE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAAgB,EAAE,QAAwB,EAAE,MAAgC;IAE5E,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnE,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACnG,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5E,OAAO,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC;IACvG,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,GAAmB,EACnB,IAAyC;IAEzC,iGAAiG;IACjG,iGAAiG;IACjG,4CAA4C;IAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACpG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,kDAAkD;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,gGAAgG;QAChG,4DAA4D;QAC5D,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB;YACzC,MAAM,EAAE,oFAAoF;SAC7F,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,+FAA+F;IAC/F,gEAAgE;IAChE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,0FAA0F;YAC1F,+EAA+E;YAC/E,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,UAAU,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB;gBACrC,MAAM,EAAE,sBAAsB,UAAU,CAAC,YAAY,CAAC,KAAK,iBAAiB,UAAU,CAAC,YAAY,CAAC,WAAW,QAAQ;aACxH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,mGAAmG;IACnG,kGAAkG;IAClG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YACpD,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,UAAU,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,GAAG,IAAI,CAAC;IACzD,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CACxC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAC1D,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAE3F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC/C,EAAE,EAAE,IAAI;QACR,cAAc;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM;KACP,CAAC,CAAC;IAEH,8FAA8F;IAC9F,8FAA8F;IAC9F,+FAA+F;IAC/F,wDAAwD;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAE9F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO;QACvC,OAAO,EAAE,OAAO,IAAI,OAAO;QAC3B,UAAU;QACV,UAAU;QACV,4EAA4E;QAC5E,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,GAAwE,EACxE,IAAyC;IAEzC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjE,+EAA+E;IAC/E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB;YACzC,MAAM,EAAE,uEAAuE;SAChF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACnC,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;YAC9C,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,GAAG,IAAI,CAAC;IACnD,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC/C,EAAE,EAAE,IAAI;QACR,cAAc;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,qEAAqE;QACrE,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM;KACP,CAAC,CAAC;IACH,2FAA2F;IAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAE9F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO;QACvC,OAAO,EAAE,OAAO,IAAI,OAAO;QAC3B,UAAU;QACV,8FAA8F;QAC9F,uCAAuC;QACvC,UAAU,EAAE,IAAmC;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAAE,YAAoB,EAAE,gBAA+B;IAEvE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;QACtD,YAAY;QACZ,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC/C,KAAK;KACN,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,gBAAgB;QACvB,YAAY;QACZ,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,YAAY,CAAC;QAC1F,WAAW,EAAE,mBAAmB;KACjC,CAAC;AACJ,CAAC"}

package/dist/src/services/connections/publish-run.d.ts

@@ -0,0 +1,64 @@
+/**
+ * @file publish-run.ts
+ * @description Publishing to the caller's OWN connection, end to end, in ONE place (TARGET-057).
+ *
+ *   WHY THIS FILE EXISTS. There are two ways a post leaves this node — a person presses send, and a
+ *   schedule comes due — and they must be the same code. A scheduler with its own copy of "open the
+ *   gate, refresh the credential, call the recipe, record the outcome" is a scheduler that will
+ *   eventually skip the gate, and skipping the gate is how the same video is published twice. On a
+ *   provider that charges per post that is also a second bill.
+ *
+ *   THE GATE IS NOT OPTIONAL AND IT IS NOT HERE AS A COURTESY. openOwnPublish() writes the attempt
+ *   BEFORE anything leaves, keyed deterministically on publisher + connection + file + caption. That
+ *   ordering is what makes a retry safe, and it is the reason the sweeper needs no lock of its own: a
+ *   sweep that dies mid-send leaves its row pending, the next tick re-enters, and the gate answers
+ *   `replay` with the first attempt's outcome instead of publishing again.
+ *
+ *   HELD AND QUEUED ARE OUTCOMES, NOT ERRORS. `held` is moderation and `queued` is a spent provider
+ *   allowance. A caller that reports either as a failure teaches the next layer to retry, which makes
+ *   both worse. They come back as ok:true with a status.
+ * @structure PublishRunInput · PublishRunOutcome · runOwnPublish
+ * @usage import { runOwnPublish } from './publish-run.js';
+ * @version-history
+ *   v1.1.0 — 2026-08-08 — A replay reports no `url` for an empty externalRef. LinkedIn answers a
+ *     successful share without a URN header, so `''` reached callers and every truthiness check
+ *     downstream drew it as a link to nothing.
+ *   v1.0.0 — 2026-08-02 — LÄHETIN phase 2: extracted from the publish route so the scheduler can
+ *     take the identical path rather than a second copy of it.
+ */
+import type { PublishAttempt } from '../../models/connection-schemas.js';
+import type { ConnectContext } from './oauth.js';
+export interface PublishRunInput {
+    /** Resolved identity. Never a client-supplied id. */
+    publisher: string;
+    connectionId: string;
+    /** A key in the publisher's OWN storage. Empty string when the post carries no file. */
+    storageKey: string;
+    caption: string;
+    params: Record<string, unknown>;
+}
+export type PublishRunOutcome = {
+    ok: true;
+    attempt: PublishAttempt;
+    /** True when the gate recognised this exact work: nothing further was published. */
+    replay: boolean;
+    /** Where it landed, when it landed. Absent for held/queued/replay-of-unfinished. */
+    url?: string;
+} | {
+    ok: false;
+    code: string;
+    reason: string;
+    /** 404 when the connection is not the caller's, 400 otherwise. The route maps it. */
+    notFound: boolean;
+    /** Set when an attempt WAS opened and then failed — so a caller can record which one. */
+    attemptId?: string;
+};
+/**
+ * Run one publish to a connection the publisher owns.
+ *
+ * Ordering is the contract: the file is resolved BEFORE the gate opens an attempt, because a missing
+ * file is the caller's mistake and should not leave a row in flight for something that was never
+ * going to be uploaded.
+ */
+export declare function runOwnPublish(ctx: ConnectContext, input: PublishRunInput): Promise<PublishRunOutcome>;
+//# sourceMappingURL=publish-run.d.ts.map

package/dist/src/services/connections/publish-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-run.d.ts","sourceRoot":"","sources":["../../../../src/services/connections/publish-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAKzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,GACzB;IACA,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,cAAc,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GACC;IACA,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,QAAQ,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEJ;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CA2F5B"}