Return the same shape as ``GET /api/v1/media/{id}``.

Store only Facebook's post object id from PAGEID_POSTID values.

Single-pass snapshot fetch for one account over a ``2 * days`` window. Returns a dict with: - ``series_map``: ``{metric_key: 2*days-long se

Raise an ``HttpError(429, ...)`` if the per-account cap is reached. Call this immediately before creating a ``PlatformPost`` row in any write

Delete a media asset, checking for post references first.

Reduce a daily series into the value + delta + sparkline a card needs. For counts, the value is the SUM over the window. For percent / minutes,

Serialize a Python value as a JSON literal safe to embed inside an HTML attribute (e.g. Alpine.js x-data). json.dumps produces JSON, then HTM

Set user.name from Google profile (custom User model has 'name', not first/last).

Return all candidate app secrets for verifying inbound webhooks. Webhook verification authenticates an inbound event rather than selecting a

Validate an uploaded file. Returns (file_type, errors). Trusts the sniffed magic bytes, not the client-supplied Content-Type. The client head

Annotate each asset with ``last_used_at``. ``PostMedia`` itself has no ``created_at``, so we walk through to the parent ``Post.create

Apply channel and tag filters to a PlatformPost queryset.

Attach an asset to a post, or queue it in the pending-media session. Post path: migrates any session-pending media first (can happen when the

Write one audit row for an authenticated failure. Codex review flagged that the per-route ``log_audit_entry`` calls only fire on the success

Build the OAuth callback URL for connection link flow. Platforms with an entry in ``PLATFORM_TO_URL_ALIAS`` use the opaque URL slug to keep t

Set ``post.proposed_publish_at`` from the composer's Schedule Post panel. Used by the draft-stage save actions (save draft, submit/resubmit for

Return ``(boto3_client, bucket_name)`` for the configured S3/R2 bucket.

Delegate to the canonical, proxy-trust-aware implementation. Originally a duplicate of the same logic in ``apps/api/limits.py`` — deliberatel

Create a MediaAsset from an uploaded file for Idea create/edit flows.

Build the full context needed for the message detail panel.

Return the app secret from a credentials dict, accepting either spelling.

Return a PlatformPost queryset filtered by calendar query params. Each row carries an ``effective_at`` annotation that falls back to ``post.s

Return inviter's effective workspace role level in *workspace_id*. Org owners are treated as workspace owners across every workspace in their

Best-effort recognition of "you don't have the right scope" errors. Each provider raises slightly different exceptions; rather than wire them

Populate context with month view data (no rendering).

Apply the backend's LOCATION prefix + ``safe_join`` traversal guard. Keeps presign / HEAD / range-GET in agreement on the exact key the object

Notify every workspace member with ``approve_posts`` (except the actor).

Future slot instants already claimed on this channel. Non-published/-publishing PlatformPosts with a future ``scheduled_at`` on ``social_acco

Parse a YYYY-MM-DD date string.

Persist PendingActivation + enqueue worker.

Shared helper to render the explore feeds partial.

Mirror apps.social_accounts.tasks.check_social_account_health's credential resolution so platforms with org-level creds (Meta apps, etc.) work.

Schedule a retry with exponential backoff.

PlatformPost IDs inside the composer's ``account_scope``, or ``None`` when unscoped.

Write a contiguous ``2 * days``-long account snapshot history. We need 2× the requested window so the derive helper's previous-period delta h