async_linkedinlib 0.2.0__tar.gz

async_linkedinlib-0.2.0/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,22 @@
+---
+name: Bug report
+about: Report a reproducible problem with the library
+---
+
+### What happened?
+
+Describe the actual and expected behavior.
+
+### Minimal reproduction
+
+Use synthetic inputs. Remove credentials, session data and private account details.
+
+### Environment
+
+- Package version or commit:
+- Python version:
+- Operating system:
+
+### Redacted error
+
+Include the exception type and relevant traceback, without raw response bodies.

async_linkedinlib-0.2.0/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,17 @@
+---
+name: Feature request
+about: Describe a missing capability or improvement
+---
+
+### Use case
+
+What are you trying to accomplish?
+
+### Proposed behavior
+
+Describe the public method or workflow you would like.
+
+### Evidence and constraints
+
+Link public documentation or describe observed behavior. Do not attach credentials,
+private captures or account data.

async_linkedinlib-0.2.0/.github/pull_request_template.md

@@ -0,0 +1,10 @@
+## Change
+
+Describe the problem and resulting behavior.
+
+## Verification
+
+List checks run and distinguish synthetic tests from live verification.
+
+- [ ] Public behavior changes are documented in README.md.
+- [ ] Tests and examples contain only synthetic data.

async_linkedinlib-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,33 @@
+name: CI
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+  workflow_call:
+permissions:
+  contents: read
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  check:
+    name: ${{ matrix.os }} / Python ${{ matrix.python }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python: ['3.11', '3.13']
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+        with:
+          python-version: ${{ matrix.python }}
+          enable-cache: true
+      - run: uv sync --locked
+      - run: uv run ruff check src tests examples
+      - run: uv run ruff format --check src tests examples
+      - run: uv run mypy src
+      - run: uv run pytest -q
+      - run: uv build

async_linkedinlib-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,83 @@
+name: Publish to PyPI
+on:
+  release:
+    types: [published]
+permissions:
+  contents: read
+concurrency:
+  group: pypi-${{ github.repository }}
+  cancel-in-progress: false
+jobs:
+  checks:
+    uses: ./.github/workflows/ci.yml
+  build:
+    needs: checks
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+        with:
+          python-version: '3.11'
+      - name: Validate release tag and source
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          git merge-base --is-ancestor HEAD origin/main
+          uv run --no-project python - <<'PYTHON'
+          import os, tomllib
+          from pathlib import Path
+          version = tomllib.loads(Path("pyproject.toml").read_text())["project"]["version"]
+          if os.environ["RELEASE_TAG"] != f"v{version}":
+              raise SystemExit(f"Release tag must be v{version}")
+          PYTHON
+      - run: uv build
+      - run: uvx twine check --strict dist/*
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: distributions
+          path: dist/*
+          if-no-files-found: error
+          retention-days: 7
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/p/async_linkedinlib
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: distributions
+          path: dist/
+      - name: Verify any previously published files
+        run: |
+          python - <<'PYTHON'
+          import hashlib, json, urllib.error, urllib.request
+          from pathlib import Path
+          try:
+              with urllib.request.urlopen("https://pypi.org/pypi/async_linkedinlib/json") as response:
+                  project = json.load(response)
+          except urllib.error.HTTPError as error:
+              if error.code != 404:
+                  raise
+              project = {"releases": {}}
+          published = {
+              item["filename"]: item["digests"]["sha256"]
+              for release in project["releases"].values() for item in release
+          }
+          for artifact in Path("dist").iterdir():
+              expected = published.get(artifact.name)
+              actual = hashlib.sha256(artifact.read_bytes()).hexdigest()
+              if expected is not None and expected != actual:
+                  raise SystemExit(f"Existing PyPI file differs: {artifact.name}")
+          PYTHON
+      - name: Publish distributions
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
+        with:
+          skip-existing: true

async_linkedinlib-0.2.0/.gitignore

@@ -0,0 +1,20 @@
+.venv/
+__pycache__/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+dist/
+*.session.json
+*.session.json.lock
+.DS_Store
+*.py[cod]
+build/
+*.egg-info/
+.env
+.env.*
+*.har
+*.mitm
+*.pem
+*.key
+.coverage
+htmlcov/

async_linkedinlib-0.2.0/AGENTS.md

@@ -0,0 +1,123 @@
+# Rules for async_linkedinlib
+
+Follow these standalone library rules.
+Read this package's [README.md](README.md), the relevant source, and its tests before editing.
+Keep this a standalone Python package; do not import the backend or `async_instalib`.
+
+## Structure and ownership
+
+- `client.py` owns `LinkedIn`, the shared session/transport, resource construction,
+  async lifecycle and session-file ownership. Add an explicit attribute for each
+  implemented resource; keep endpoint logic out of this class.
+- `auth/` owns login orchestration, fresh login context and supported challenge
+  handling. It may reuse the account resource to verify a completed login.
+- `session/` owns account/device state, scoped cookies, persistence and file locks.
+  It performs no HTTP requests. Do not store passwords or Google ID tokens here.
+- `transport/` is the single network boundary. `http.py` owns the HTTPX pool,
+  authentication headers, cookie updates, timeouts, HTTP error translation and cooldowns.
+  `voyager.py` runs persisted GraphQL operations and rest.li calls over it, and `restli.py`
+  encodes variables exactly as the app's `DataEncoder` does.
+- `resources/` owns feature operations and provider-response decoding. Every
+  resource receives the existing transport; never create a separate session or
+  HTTP client per feature.
+- `models/` owns typed public results. Models perform no network or persistence work.
+- `config/` owns caller options and versioned app metadata, separate from credentials.
+- `exceptions.py` owns public errors; `cli.py` owns interactive commands and credential
+  input. Put runnable usage examples in `examples/`.
+
+Group methods around a user's feature: account, feed, posts, comments, search, jobs, and
+later connections and messages. Shared by several features: `resources/reactions.py`
+(react and list reactions), `resources/paging.py` (every list's pages and cursors; follow the
+app's pager, never write another), `resources/threads.py` (thread URNs) and
+`resources/mentions.py` (text mentions). `models/content.py` holds the shared `Post`, `Author` and
+`SocialCounts`; `models/pagination.py` holds `Page` and `Cursor`.
+A small feature can start as `resources/<feature>.py`. Split a substantial feature
+into `resources/<feature>/` when its real responsibilities justify that split.
+Matching result models belong in `models/<feature>.py`; tests belong under that
+feature in `tests/`. Do not pre-create empty resources, generic CRUD methods, plugin
+registries, base resource classes or speculative interfaces.
+
+Use cohesive classes and explicit dependencies. Keep public imports stable:
+`from async_linkedinlib import LinkedIn, Session, Member` must continue working.
+Keep `__init__.py` files declarative, with `__all__` and a one-line purpose comment
+on each re-export. Annotate public APIs, use familiar names, follow Ruff's 100-column
+format and a 500-line source file limit.
+
+## Adding a LinkedIn feature
+
+1. Establish the operation from a captured exchange or from the shipped app's own request
+   code (decompiled Voyager GraphQL clients, routes and builders). App 4.1.1267 draws these
+   screens with server-driven protobuf (SDUI); the SDK does not parse SDUI UI trees and uses
+   the Voyager operations the same APK ships, over JSON. Take variable names, enums and
+   bodies from app code: the server silently ignores unknown variables. Record the app
+   version and evidence in the README. Distinguish observed behavior, locally tested
+   behavior and live SDK verification.
+2. Define the smallest useful public method, typed result and expected failures.
+   Keep IDs as strings. Preserve unknown versus absent fields rather than guessing.
+3. Implement request construction and decoding inside the feature, using the shared
+   transport. Do not spread provider payloads and URL construction through `client.py`.
+4. Test the request contract and meaningful failures with synthetic data. Use a real
+   loopback server when serialization, cookies, streaming or lifecycle matters.
+5. Update the README's feature coverage, usage and limits. Add root exports only for
+   supported public types. An observed endpoint does not establish every capability
+   or variation of that feature.
+
+Intended future groups are `connections` and `messages`. These names describe extension
+boundaries, not implemented functionality. Implement only the feature requested.
+
+## Protocol and account state
+
+- `li_at` is the primary session credential; preserve `JSESSIONID` and its CSRF role.
+  Retain cookie domain, path, security and expiry when available. Never flatten the
+  entire jar into a global credential header or send it to arbitrary hosts.
+- Each client owns one account and one connection pool. New features must use the
+  same cookie rotation and cooldown behavior. Preserve saved-session compatibility;
+  version persisted schema changes explicitly.
+- Google sign-in currently means exchanging a caller-supplied fresh ID token for
+  LinkedIn's Android flow. Do not imply that the SDK acquires Google tokens or accepts
+  tokens issued for unrelated OAuth clients. Do not replay a captured login token.
+- Do not invent endpoints, GraphQL IDs, token refresh, OTP, password login, challenge
+  continuation or anti-abuse telemetry. Unsupported server flows fail explicitly.
+- Keep pagination explicit. Preserve opaque server cursors and their account/query
+  context (`Cursor` carries the operation, query scope and owning session); do not
+  silently fetch every page or invent continuation values.
+- A write whose 2xx reply cannot be read raises `UnconfirmedWrite`, never a plain
+  `ProtocolError`, so callers know the change may exist.
+- Reads must not implicitly send messages, mark conversations read, follow, connect,
+  apply for jobs, publish, delete or acknowledge content. Expose those actions as
+  separate, clearly named operations when supported by evidence.
+- Never silently retry a write or credential exchange. A timeout can occur after the
+  server accepted it. Do not assume an idempotency mechanism exists.
+- Keep TLS verification enabled, redirects explicit, and destination hosts constrained
+  to the documented operation. Uploads observed so far go to www.linkedin.com; validate an
+  upload URL's host before sending. Add another host only when its flow requires it, with
+  credentials scoped to that host.
+- Accept GraphQL replies with errors only through `Voyager.query(...,
+  ignore_null_field_errors=True)`, and only for finders known to report harmless nulls.
+
+## Credentials and verification
+
+Keep raw captures, cookies, passwords, ID tokens and real account data outside Git.
+Use hidden prompts or caller-provided secret inputs, never credential arguments.
+Session files remain atomic and mode 0600; preserve exclusive file ownership.
+Logs, exception messages and object reprs must not expose secrets or raw responses.
+Challenge URLs can carry private state and must not appear in ordinary error text.
+
+Use synthetic credentials in tests. Live reads must use the user's authorized
+session. Live writes require an authorized action and target; preserve that
+authorization across turns rather than asking repeatedly. Delete test-created remote data, verify cleanup, and report any effects that cannot be undone.
+
+Run checks from this directory:
+
+```sh
+uv run pytest -q
+uv run ruff check src tests examples
+uv run ruff format --check src tests examples
+uv run mypy src
+uv build
+```
+
+Use focused tests while developing, then the full package suite for changes to
+auth, transport, sessions or public imports. Do not contact LinkedIn in the normal
+test suite. Report live and simulated verification separately. Keep lasting
+documentation in this README and these rules; plans belong in `tasks/`. Do not create a separate documentation site.

async_linkedinlib-0.2.0/CLAUDE.md

@@ -0,0 +1,4 @@
+# Library instructions
+
+Read and follow [AGENTS.md](AGENTS.md). It is the single source of library-specific
+structure, protocol, credential-handling and verification rules.

async_linkedinlib-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anandesh Sharma
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.