vidspotai-shared 1.0.82-dev.0 → 1.0.83

package/lib/services/socialMetrics/meta.metrics.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookMetricsClient = exports.InstagramMetricsClient = void 0;
+const types_1 = require("../../globals/types");
+/**
+ * Meta metrics clients — Phase 3. Meta deprecated `impressions` in 2025, so we
+ * key analytics on `views`/`reach` (plan §3). Both clients normalize Graph
+ * responses into ISocialMetricSnapshot; missing metrics default to 0 (a fresh
+ * post may not have all insights populated for 24–72h).
+ *
+ * Config (env): META_GRAPH_VERSION (optional, default v21.0).
+ */
+const DEFAULT_GRAPH_VERSION = "v21.0";
+function graph(path) {
+    const v = process.env.META_GRAPH_VERSION || DEFAULT_GRAPH_VERSION;
+    return `https://graph.facebook.com/${v}${path}`;
+}
+function toNum(v) {
+    const n = typeof v === "number" ? v : Number(v);
+    return Number.isFinite(n) ? n : 0;
+}
+/** Instagram media insights for a published Reel/media. */
+class InstagramMetricsClient {
+    constructor() {
+        this.provider = types_1.ESocialProvider.INSTAGRAM;
+    }
+    async fetchPostMetrics({ accessToken, providerPostId, }) {
+        const tokenQs = `access_token=${encodeURIComponent(accessToken)}`;
+        // like_count / comments_count come from the media object itself.
+        const fieldsResp = await fetch(graph(`/${providerPostId}?fields=like_count,comments_count&${tokenQs}`));
+        const fields = (await fieldsResp.json());
+        if (!fieldsResp.ok || fields.error) {
+            throw new Error(`InstagramMetrics: media fields ${fieldsResp.status} ${fields.error?.message ?? ""}`.trim());
+        }
+        // reach / saves / shares / plays(views) come from the insights edge.
+        const snapshot = {
+            likes: toNum(fields.like_count),
+            comments: toNum(fields.comments_count),
+        };
+        try {
+            const insightsResp = await fetch(graph(`/${providerPostId}/insights?metric=reach,saved,shares,plays&${tokenQs}`));
+            const insights = (await insightsResp.json());
+            for (const m of insights.data ?? []) {
+                const value = toNum(m.values?.[0]?.value);
+                switch (m.name) {
+                    case "reach":
+                        snapshot.reach = value;
+                        break;
+                    case "saved":
+                        snapshot.saves = value;
+                        break;
+                    case "shares":
+                        snapshot.shares = value;
+                        break;
+                    case "plays":
+                        snapshot.views = value;
+                        break;
+                }
+            }
+        }
+        catch {
+            // Insights can be unavailable for the first hours — counters still ship.
+        }
+        return snapshot;
+    }
+    /**
+     * IG audience demographics via the account-level insights edge. Needs a
+     * business/creator account with ≥100 followers; otherwise Graph errors and we
+     * let the caller degrade to "not supported". `follower_demographics` returns
+     * a breakdown keyed by the requested dimension; `follower_count` (lifetime
+     * total) comes from the user node.
+     */
+    async fetchAudience({ accessToken, providerAccountId, }) {
+        const tokenQs = `access_token=${encodeURIComponent(accessToken)}`;
+        const audience = {};
+        // Lifetime follower total (cheap, almost always available).
+        try {
+            const resp = await fetch(graph(`/${providerAccountId}?fields=followers_count&${tokenQs}`));
+            const json = (await resp.json());
+            if (resp.ok && typeof json.followers_count === "number") {
+                audience.followerCount = json.followers_count;
+            }
+        }
+        catch {
+            // Non-fatal — demographics below are the real payload.
+        }
+        // One demographic_breakdown call per dimension (Graph requires the
+        // breakdown param to match a single dimension at a time).
+        const dims = [
+            { key: "age", breakdown: "age" },
+            { key: "gender", breakdown: "gender" },
+            { key: "country", breakdown: "country" },
+            { key: "city", breakdown: "city" },
+        ];
+        for (const { key, breakdown } of dims) {
+            try {
+                const resp = await fetch(graph(`/${providerAccountId}/insights?metric=follower_demographics&period=lifetime&metric_type=total_value&breakdown=${breakdown}&${tokenQs}`));
+                const json = (await resp.json());
+                const results = json.data?.[0]?.total_value?.breakdowns?.[0]?.results ?? [];
+                const buckets = results
+                    .map((r) => ({
+                    label: r.dimension_values?.[0] ?? "",
+                    value: toNum(r.value),
+                }))
+                    .filter((b) => b.label !== "")
+                    .sort((a, b) => b.value - a.value);
+                if (buckets.length > 0) {
+                    audience[key] = buckets;
+                }
+            }
+            catch {
+                // Skip any single dimension that errors; others may still resolve.
+            }
+        }
+        return audience;
+    }
+}
+exports.InstagramMetricsClient = InstagramMetricsClient;
+/** Facebook Page video metrics via the video object summaries. */
+class FacebookMetricsClient {
+    constructor() {
+        this.provider = types_1.ESocialProvider.FACEBOOK;
+    }
+    async fetchPostMetrics({ accessToken, providerPostId, }) {
+        const resp = await fetch(graph(`/${providerPostId}?fields=views,likes.summary(true).limit(0),comments.summary(true).limit(0)&access_token=${encodeURIComponent(accessToken)}`));
+        const json = (await resp.json());
+        if (!resp.ok || json.error) {
+            throw new Error(`FacebookMetrics: video fields ${resp.status} ${json.error?.message ?? ""}`.trim());
+        }
+        return {
+            views: toNum(json.views),
+            likes: toNum(json.likes?.summary?.total_count),
+            comments: toNum(json.comments?.summary?.total_count),
+        };
+    }
+}
+exports.FacebookMetricsClient = FacebookMetricsClient;

package/lib/services/socialMetrics/tiktok.metrics.d.ts

@@ -0,0 +1,8 @@
+import { ESocialProvider } from "../../globals/types";
+import { ISocialMetricSnapshot } from "../../models/social.model";
+import { ISocialMetricsClient, MetricsInput } from "./types";
+export declare class TikTokMetricsClient implements ISocialMetricsClient {
+    readonly provider = ESocialProvider.TIKTOK;
+    fetchPostMetrics(input: MetricsInput): Promise<ISocialMetricSnapshot>;
+}
+//# sourceMappingURL=tiktok.metrics.d.ts.map

package/lib/services/socialMetrics/tiktok.metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tiktok.metrics.d.ts","sourceRoot":"","sources":["../../../src/services/socialMetrics/tiktok.metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA8B7D,qBAAa,mBAAoB,YAAW,oBAAoB;IAC9D,QAAQ,CAAC,QAAQ,0BAA0B;IAErC,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAuB5E"}

package/lib/services/socialMetrics/tiktok.metrics.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TikTokMetricsClient = void 0;
+const types_1 = require("../../globals/types");
+/**
+ * TikTok metrics client — Phase 6. Queries the Display/Video API for a single
+ * video's lifetime counts and normalizes into ISocialMetricSnapshot.
+ *
+ * POST /v2/video/query/?fields=id,like_count,comment_count,share_count,view_count
+ *   body: { filters: { video_ids: [providerPostId] } }
+ *
+ * Requires the `video.list` scope (granted only with business scopes). When the
+ * scope is absent the call 403s and the metrics worker logs + reschedules
+ * (non-fatal), so this stays best-effort like the other clients.
+ */
+const QUERY_ENDPOINT = "https://open.tiktokapis.com/v2/video/query/?fields=id,like_count,comment_count,share_count,view_count";
+class TikTokMetricsClient {
+    constructor() {
+        this.provider = types_1.ESocialProvider.TIKTOK;
+    }
+    async fetchPostMetrics(input) {
+        const resp = await fetch(QUERY_ENDPOINT, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${input.accessToken}`,
+                "Content-Type": "application/json; charset=UTF-8",
+            },
+            body: JSON.stringify({ filters: { video_ids: [input.providerPostId] } }),
+        });
+        const json = (await resp.json());
+        if (!resp.ok || json.error?.code) {
+            throw new Error(`TikTokMetrics: video query ${resp.status} ${json.error?.message ?? ""}`.trim());
+        }
+        const v = json.data?.videos?.[0];
+        return {
+            views: v?.view_count ?? 0,
+            likes: v?.like_count ?? 0,
+            comments: v?.comment_count ?? 0,
+            shares: v?.share_count ?? 0,
+        };
+    }
+}
+exports.TikTokMetricsClient = TikTokMetricsClient;

package/lib/services/socialMetrics/types.d.ts

@@ -0,0 +1,54 @@
+import { ESocialProvider } from "../../globals/types";
+import { ISocialMetricSnapshot } from "../../models/social.model";
+/**
+ * X8 Social Suite — analytics client abstraction. No platform pushes analytics
+ * and data lags 24–72h, so the metrics worker polls each published post on a
+ * schedule and snapshots into the `socialAnalytics` time-series. One
+ * implementation per platform normalizes provider metrics into
+ * `ISocialMetricSnapshot` (views-centric — impressions are deprecated on Meta).
+ * See notes/SOCIAL_SUITE_PLAN.md §3/§4.
+ */
+export interface MetricsInput {
+    /** Cleartext access token for the owning account (already refreshed). */
+    accessToken: string;
+    /** Provider's post/video id to fetch metrics for. */
+    providerPostId: string;
+}
+export interface AudienceInput {
+    /** Cleartext access token for the owning account (already refreshed). */
+    accessToken: string;
+    /** Provider's account id (IG user id / channel id / Page id). */
+    providerAccountId: string;
+}
+/** One bucket of an audience breakdown, e.g. { label: "25-34", value: 0.32 }. */
+export interface IAudienceBucket {
+    label: string;
+    /** Share 0..1 (preferred) or an absolute count where shares aren't given. */
+    value: number;
+}
+/**
+ * Normalized audience demographics (C7 / G3). Owner-account only and gated to
+ * business-tier accounts on Meta (≥100 followers). Any dimension the provider
+ * doesn't expose is simply omitted.
+ */
+export interface ISocialAudience {
+    followerCount?: number;
+    age?: IAudienceBucket[];
+    gender?: IAudienceBucket[];
+    country?: IAudienceBucket[];
+    city?: IAudienceBucket[];
+    /** Active hours 0..23 (engaged-follower online time) where available. */
+    activeHours?: IAudienceBucket[];
+}
+export interface ISocialMetricsClient {
+    readonly provider: ESocialProvider;
+    /** Fetch the current lifetime metrics for one post. */
+    fetchPostMetrics(input: MetricsInput): Promise<ISocialMetricSnapshot>;
+    /**
+     * Fetch audience demographics for the account (owner-only, business-tier).
+     * Optional: providers/accounts without the capability omit it, and callers
+     * degrade gracefully to "not supported". See plan §C7/§2B-G3.
+     */
+    fetchAudience?(input: AudienceInput): Promise<ISocialAudience>;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/services/socialMetrics/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/services/socialMetrics/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,eAAe,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;IACzB,yEAAyE;IACzE,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,uDAAuD;IACvD,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtE;;;;OAIG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAChE"}

package/lib/services/socialMetrics/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/services/socialMetrics/youtube.metrics.d.ts

@@ -0,0 +1,8 @@
+import { ESocialProvider } from "../../globals/types";
+import { ISocialMetricSnapshot } from "../../models/social.model";
+import { ISocialMetricsClient, MetricsInput } from "./types";
+export declare class YouTubeMetricsClient implements ISocialMetricsClient {
+    readonly provider = ESocialProvider.YOUTUBE;
+    fetchPostMetrics({ accessToken, providerPostId, }: MetricsInput): Promise<ISocialMetricSnapshot>;
+}
+//# sourceMappingURL=youtube.metrics.d.ts.map

package/lib/services/socialMetrics/youtube.metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"youtube.metrics.d.ts","sourceRoot":"","sources":["../../../src/services/socialMetrics/youtube.metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAuB7D,qBAAa,oBAAqB,YAAW,oBAAoB;IAC/D,QAAQ,CAAC,QAAQ,2BAA2B;IAEtC,gBAAgB,CAAC,EACrB,WAAW,EACX,cAAc,GACf,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAmBjD"}

package/lib/services/socialMetrics/youtube.metrics.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.YouTubeMetricsClient = void 0;
+const types_1 = require("../../globals/types");
+/**
+ * YouTube metrics client. Uses the Data API `videos.list?part=statistics` for
+ * lifetime counters (views/likes/comments) — cheap (1 quota unit) and available
+ * to any channel. Watch-time / CTR / impressions live in the YouTube Analytics
+ * API and lag ~48–72h; we add those in Phase 4 (plan §3). Phase 1 ships the
+ * core counters so the analytics card has real data.
+ */
+const STATS_ENDPOINT = "https://www.googleapis.com/youtube/v3/videos?part=statistics";
+class YouTubeMetricsClient {
+    constructor() {
+        this.provider = types_1.ESocialProvider.YOUTUBE;
+    }
+    async fetchPostMetrics({ accessToken, providerPostId, }) {
+        const url = `${STATS_ENDPOINT}&id=${encodeURIComponent(providerPostId)}`;
+        const resp = await fetch(url, {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        if (!resp.ok) {
+            throw new Error(`YouTubeMetrics: videos.list ${resp.status}`);
+        }
+        const json = (await resp.json());
+        const stats = json.items?.[0]?.statistics;
+        if (!stats) {
+            throw new Error(`YouTubeMetrics: no stats for video ${providerPostId}`);
+        }
+        return {
+            views: toNum(stats.viewCount),
+            likes: toNum(stats.likeCount),
+            comments: toNum(stats.commentCount),
+        };
+    }
+}
+exports.YouTubeMetricsClient = YouTubeMetricsClient;
+function toNum(v) {
+    if (v === undefined)
+        return 0;
+    const n = Number(v);
+    return Number.isFinite(n) ? n : 0;
+}

package/lib/services/socialOAuth/factory.d.ts

@@ -0,0 +1,7 @@
+import { ESocialProvider } from "../../globals/types";
+import { ISocialOAuthProvider } from "./types";
+/** Returns the OAuth provider for a platform, or throws if not yet supported. */
+export declare function getSocialOAuthProvider(provider: ESocialProvider): ISocialOAuthProvider;
+/** True when a platform's OAuth is wired up (used to gate the connect UI). */
+export declare function isSocialOAuthSupported(provider: ESocialProvider): boolean;
+//# sourceMappingURL=factory.d.ts.map

package/lib/services/socialOAuth/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/services/socialOAuth/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAyB/C,iFAAiF;AACjF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,GACxB,oBAAoB,CAMtB;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEzE"}

package/lib/services/socialOAuth/factory.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSocialOAuthProvider = getSocialOAuthProvider;
+exports.isSocialOAuthSupported = isSocialOAuthSupported;
+const types_1 = require("../../globals/types");
+const linkedin_oauth_1 = require("./linkedin.oauth");
+const meta_oauth_1 = require("./meta.oauth");
+const pinterest_oauth_1 = require("./pinterest.oauth");
+const threads_oauth_1 = require("./threads.oauth");
+const tiktok_oauth_1 = require("./tiktok.oauth");
+const x_oauth_1 = require("./x.oauth");
+const youtube_oauth_1 = require("./youtube.oauth");
+/**
+ * OAuth provider factory. Mirrors the aiGenFactory pattern: map a provider enum
+ * to its implementation. Add TikTok/LinkedIn here as their phases land.
+ *
+ * Meta backs both FACEBOOK and INSTAGRAM: one Facebook Login grant resolves the
+ * user's Pages (FACEBOOK) or their linked IG Business accounts (INSTAGRAM); the
+ * `target` ctor arg selects which the callback persists.
+ */
+const registry = {
+    [types_1.ESocialProvider.YOUTUBE]: () => new youtube_oauth_1.YouTubeOAuthProvider(),
+    [types_1.ESocialProvider.FACEBOOK]: () => new meta_oauth_1.MetaOAuthProvider(types_1.ESocialProvider.FACEBOOK),
+    [types_1.ESocialProvider.INSTAGRAM]: () => new meta_oauth_1.MetaOAuthProvider(types_1.ESocialProvider.INSTAGRAM),
+    [types_1.ESocialProvider.TIKTOK]: () => new tiktok_oauth_1.TikTokOAuthProvider(),
+    [types_1.ESocialProvider.THREADS]: () => new threads_oauth_1.ThreadsOAuthProvider(),
+    [types_1.ESocialProvider.LINKEDIN]: () => new linkedin_oauth_1.LinkedInOAuthProvider(),
+    [types_1.ESocialProvider.X]: () => new x_oauth_1.XOAuthProvider(),
+    [types_1.ESocialProvider.PINTEREST]: () => new pinterest_oauth_1.PinterestOAuthProvider(),
+};
+/** Returns the OAuth provider for a platform, or throws if not yet supported. */
+function getSocialOAuthProvider(provider) {
+    const make = registry[provider];
+    if (!make) {
+        throw new Error(`Social OAuth not implemented for provider '${provider}'`);
+    }
+    return make();
+}
+/** True when a platform's OAuth is wired up (used to gate the connect UI). */
+function isSocialOAuthSupported(provider) {
+    return Boolean(registry[provider]);
+}

package/lib/services/socialOAuth/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./types";
+export * from "./youtube.oauth";
+export * from "./meta.oauth";
+export * from "./tiktok.oauth";
+export * from "./threads.oauth";
+export * from "./linkedin.oauth";
+export * from "./x.oauth";
+export * from "./pinterest.oauth";
+export * from "./oauthState";
+export * from "./factory";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/socialOAuth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/socialOAuth/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC"}

package/lib/services/socialOAuth/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./youtube.oauth"), exports);
+__exportStar(require("./meta.oauth"), exports);
+__exportStar(require("./tiktok.oauth"), exports);
+__exportStar(require("./threads.oauth"), exports);
+__exportStar(require("./linkedin.oauth"), exports);
+__exportStar(require("./x.oauth"), exports);
+__exportStar(require("./pinterest.oauth"), exports);
+__exportStar(require("./oauthState"), exports);
+__exportStar(require("./factory"), exports);

package/lib/services/socialOAuth/linkedin.oauth.d.ts

@@ -0,0 +1,14 @@
+import { ESocialProvider } from "../../globals/types";
+import { AuthUrlParams, ConnectResult, ExchangeCodeParams, ISocialOAuthProvider, OAuthTokens } from "./types";
+export declare class LinkedInOAuthProvider implements ISocialOAuthProvider {
+    readonly provider = ESocialProvider.LINKEDIN;
+    private clientId;
+    private clientSecret;
+    getAuthUrl({ state, redirectUri, requestBusinessScopes, }: AuthUrlParams): string;
+    exchangeCode({ code, redirectUri, }: ExchangeCodeParams): Promise<ConnectResult>;
+    refresh(refreshToken: string): Promise<OAuthTokens>;
+    private postToken;
+    private toTokens;
+    private resolveAccount;
+}
+//# sourceMappingURL=linkedin.oauth.d.ts.map

package/lib/services/socialOAuth/linkedin.oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linkedin.oauth.d.ts","sourceRoot":"","sources":["../../../src/services/socialOAuth/linkedin.oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACZ,MAAM,SAAS,CAAC;AAyCjB,qBAAa,qBAAsB,YAAW,oBAAoB;IAChE,QAAQ,CAAC,QAAQ,4BAA4B;IAE7C,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,YAAY;IAMpB,UAAU,CAAC,EACT,KAAK,EACL,WAAW,EACX,qBAAqB,GACtB,EAAE,aAAa,GAAG,MAAM;IAcnB,YAAY,CAAC,EACjB,IAAI,EACJ,WAAW,GACZ,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC;IAkBxC,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAiB3C,SAAS;IAmBvB,OAAO,CAAC,QAAQ;YAaF,cAAc;CAiB7B"}

package/lib/services/socialOAuth/linkedin.oauth.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkedInOAuthProvider = void 0;
+const types_1 = require("../../globals/types");
+const logger_1 = require("../../utils/logger");
+/**
+ * LinkedIn OAuth provider. Phase 6 — fast-follow adapter.
+ *
+ * Config (env):
+ *   LINKEDIN_CLIENT_ID
+ *   LINKEDIN_CLIENT_SECRET
+ *
+ * Notes / gates (plan §G15-17):
+ * - Member posting uses `w_member_social` + OpenID (`openid profile`). Company-
+ *   page posting + analytics is the Community Management API — vetted via a
+ *   screencast review (business-tier G-features), requested via business scopes.
+ * - Refresh tokens are only issued to approved Marketing Developer Platform
+ *   apps; standard apps get a 60-day access token and must re-consent. `refresh`
+ *   still tries the refresh grant for approved apps.
+ */
+const AUTH_ENDPOINT = "https://www.linkedin.com/oauth/v2/authorization";
+const TOKEN_ENDPOINT = "https://www.linkedin.com/oauth/v2/accessToken";
+const USERINFO_ENDPOINT = "https://api.linkedin.com/v2/userinfo";
+const BASE_SCOPES = ["openid", "profile", "w_member_social"];
+const BUSINESS_SCOPES = ["r_organization_social", "w_organization_social"];
+class LinkedInOAuthProvider {
+    constructor() {
+        this.provider = types_1.ESocialProvider.LINKEDIN;
+    }
+    clientId() {
+        const v = process.env.LINKEDIN_CLIENT_ID;
+        if (!v)
+            throw new Error("LinkedInOAuth: LINKEDIN_CLIENT_ID not set");
+        return v;
+    }
+    clientSecret() {
+        const v = process.env.LINKEDIN_CLIENT_SECRET;
+        if (!v)
+            throw new Error("LinkedInOAuth: LINKEDIN_CLIENT_SECRET not set");
+        return v;
+    }
+    getAuthUrl({ state, redirectUri, requestBusinessScopes, }) {
+        const scopes = requestBusinessScopes
+            ? [...BASE_SCOPES, ...BUSINESS_SCOPES]
+            : BASE_SCOPES;
+        const params = new URLSearchParams({
+            response_type: "code",
+            client_id: this.clientId(),
+            redirect_uri: redirectUri,
+            state,
+            scope: scopes.join(" "),
+        });
+        return `${AUTH_ENDPOINT}?${params.toString()}`;
+    }
+    async exchangeCode({ code, redirectUri, }) {
+        const token = await this.postToken(new URLSearchParams({
+            grant_type: "authorization_code",
+            code,
+            redirect_uri: redirectUri,
+            client_id: this.clientId(),
+            client_secret: this.clientSecret(),
+        }));
+        if (!token.access_token) {
+            throw new Error("LinkedInOAuth: token exchange returned no access_token");
+        }
+        const tokens = this.toTokens(token);
+        const account = await this.resolveAccount(token.access_token);
+        return { account, tokens };
+    }
+    async refresh(refreshToken) {
+        const token = await this.postToken(new URLSearchParams({
+            grant_type: "refresh_token",
+            refresh_token: refreshToken,
+            client_id: this.clientId(),
+            client_secret: this.clientSecret(),
+        }));
+        if (!token.access_token) {
+            throw new Error("LinkedInOAuth: refresh returned no access_token");
+        }
+        const tokens = this.toTokens(token);
+        if (!tokens.refreshToken)
+            tokens.refreshToken = refreshToken;
+        return tokens;
+    }
+    async postToken(body) {
+        const resp = await fetch(TOKEN_ENDPOINT, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: body.toString(),
+        });
+        const json = (await resp.json());
+        if (!resp.ok || json.error) {
+            throw new Error(`LinkedInOAuth: token endpoint ${resp.status} ${json.error ?? ""} ${json.error_description ?? ""}`.trim());
+        }
+        return json;
+    }
+    toTokens(token) {
+        const now = Date.now();
+        return {
+            accessToken: token.access_token,
+            refreshToken: token.refresh_token,
+            expiresAt: now + (token.expires_in ?? 60 * 24 * 3600) * 1000,
+            refreshExpiresAt: token.refresh_token_expires_in
+                ? now + token.refresh_token_expires_in * 1000
+                : undefined,
+            scopes: token.scope ? token.scope.split(" ").filter(Boolean) : [],
+        };
+    }
+    async resolveAccount(accessToken) {
+        const resp = await fetch(USERINFO_ENDPOINT, {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        const json = (await resp.json());
+        if (!resp.ok || !json.sub) {
+            throw new Error(`LinkedInOAuth: userinfo ${resp.status}`);
+        }
+        logger_1.logger.info("LinkedInOAuth: connected", { sub: json.sub });
+        return {
+            // Store the bare member id; the publisher builds urn:li:person:{id}.
+            providerAccountId: json.sub,
+            displayName: json.name ?? "LinkedIn member",
+            avatarUrl: json.picture,
+            kind: types_1.ESocialAccountKind.PERSONAL,
+        };
+    }
+}
+exports.LinkedInOAuthProvider = LinkedInOAuthProvider;

package/lib/services/socialOAuth/meta.oauth.d.ts

@@ -0,0 +1,31 @@
+import { ESocialProvider } from "../../globals/types";
+import { AuthUrlParams, ConnectResult, ExchangeCodeParams, ISocialOAuthProvider, OAuthTokens } from "./types";
+export declare class MetaOAuthProvider implements ISocialOAuthProvider {
+    readonly provider: ESocialProvider;
+    /** Which surface this instance resolves: FACEBOOK (Pages) or INSTAGRAM. */
+    private readonly target;
+    constructor(target: ESocialProvider);
+    private graphVersion;
+    private graph;
+    private appId;
+    private appSecret;
+    getAuthUrl({ state, redirectUri, requestBusinessScopes, }: AuthUrlParams): string;
+    /**
+     * Single-account path is unused for Meta (one grant → many accounts), but the
+     * interface requires it. We return the first resolved account so any caller
+     * that ignores `exchangeCodeMulti` still gets something sensible.
+     */
+    exchangeCode(params: ExchangeCodeParams): Promise<ConnectResult>;
+    exchangeCodeMulti(params: ExchangeCodeParams): Promise<ConnectResult[]>;
+    private resolveFacebookPages;
+    private resolveInstagramAccounts;
+    private pageTokens;
+    /**
+     * Meta Page tokens don't expire, so refresh should never be called by the
+     * daemon (far-future expiry). If it is, surface a reconnect rather than
+     * silently returning a possibly-revoked token.
+     */
+    refresh(): Promise<OAuthTokens>;
+    private getJson;
+}
+//# sourceMappingURL=meta.oauth.d.ts.map

package/lib/services/socialOAuth/meta.oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.oauth.d.ts","sourceRoot":"","sources":["../../../src/services/socialOAuth/meta.oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACZ,MAAM,SAAS,CAAC;AAiFjB,qBAAa,iBAAkB,YAAW,oBAAoB;IAC5D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAEnC,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,MAAM,EAAE,eAAe;IAWnC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,SAAS;IAMjB,UAAU,CAAC,EACT,KAAK,EACL,WAAW,EACX,qBAAqB,GACtB,EAAE,aAAa,GAAG,MAAM;IAczB;;;;OAIG;IACG,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC;IAahE,iBAAiB,CACrB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC;YAgDb,oBAAoB;YA8BpB,wBAAwB;IAgCtC,OAAO,CAAC,UAAU;IASlB;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;YAMvB,OAAO;CAYtB"}