Return the list of platform slugs with analytics enabled. Falls back to "all platforms" if no rows exist yet (fresh DB before the see

Per-video stats from the ``/v2/video/query/`` endpoint. Requires the ``video.list`` scope. TikTok returns lifetime totals (view/like/

Transition to a new status, raising ValueError if invalid.

Return seconds until an AT Protocol access JWT expires, or None if unknown. The createSession / refreshSession responses don't include an expiry

RFC 7591 section 3.2.2 error response.

Compute the next `count` PostingSlot datetimes for a social account. Starting from `after_dt`, walks forward through the week to find upcomin

Re-check a workspace permission inside a Ninja route body. We can't decorate Ninja routes with ``@require_permission`` because it expects a D

Reset ``scheduled_at`` for published posts dragged into the future. Before the ``assign_queue_slots`` guard landed, re-running a queue (adding or

Patch the pooled httpx.Client so the import never hits the network. client.get(...) handles the per-photo download registration; clie

Publish a single PlatformPost to its target platform. Returns dict: {"success": bool, "platform_post_id": str, "error": str}

Create a signed OAuth state parameter.

Safely convert a string to UUID, returning None on failure.

Transition *pp* to *target_status*, returning True on success.

Return local XML tag name without namespace.

Per-video metrics from the YouTube Analytics API, batched. Returns ``{video_id: PostMetrics}`` populated with ``extra``: ``watch_time

Validate an out-of-band-uploaded object SERVER-SIDE; return its metadata. The validation chokepoint for presigned uploads, mirroring ``create_ass

kwargs to splat into ``get_auth_url`` / ``exchange_code`` for a PKCE verifier. Empty when there is no verifier, so non-PKCE providers are invoked

Parse RSS/Atom/Webhook XML safely. Hardens against billion-laughs / quadratic-blowup attacks WITHOUT pulling in the `defusedxml` dependency:

Full-text search on filename and tags. Uses PostgreSQL full-text search when available, falls back to case-insensitive LIKE queries o

Return only shared org-level assets (workspace is null).

Keep ``Post.scheduled_at`` in sync with the earliest child time. Three cases: * Some children have a ``scheduled_at`` → set parent to the mi

Reject any string that isn't a 6-digit hex color (#RRGGBB) or empty. Used as a model-field validator on every user-editable color column. Emp

Coerce an external/client JSON field to a string. Client- and Unsplash-supplied payloads can carry ``null`` (or numbers) where we expect a UR

Create or update a SocialAccount from OAuth results.

Find PlatformPosts due for publishing, using Coalesce fallback.

Render the feeds tab partial with modal state and first event page.

Normalise *target* into ``(post, [platform_posts], is_bundled)``. ``target`` may be a :class:`Post` (returns every child whose current state

Validate that a URL points to a reachable RSS/Atom XML feed.

Detect whether mutation endpoint should return JSON payload.

Fetch Meta insights one metric at a time so one invalid metric cannot fail all metrics.

Return the platform identifier for a URL slug (e.g. ``social1`` → ``tiktok``). Unrecognised slugs pass through so the legacy ``callback/tiktok/``

Generate the OAuth authorization URL. ``code_verifier`` is only supplied for providers that set ``uses_pkce = True``; PKCE providers

Fetch the authenticated account's profile information.

Return a fresh PKCE ``code_verifier`` when ``provider`` requires PKCE, else None. Callers store the result in the flow's OAuth session payload an

Shared tool-call shim: dispatch to the per-org IntelligenceAPIClient method, render the result partial, and log a usage event.

Return the first candidate that names a real IANA zone, else ``"UTC"``. Guards the ``{% timezone %}`` tag against an unknown/empty user-supplied

Populate context with day view data (no rendering).

Look up a ConnectionLink by token, return None if not found.

Build a JWT-shaped string (header.payload.signature) — signature is unchecked.

Persist one slot assignment to the QueueEntry and its PlatformPost.

Place ``post`` into this queue's first open slot (upsert-aware). Comment §1 (Create · Next Available) and §4 (Edit · Next Available): if the

Validate and atomically consume a magic link token (single-use). Returns: (user, workspace, is_valid) tuple. If missing/expired/a

Create a new media asset from an uploaded file. The stored mime_type is taken from a magic-byte sniff, NOT from the client-supplied Content-T