Raised inside a handler to translate into a JSON-RPC error envelope. Handlers raise this for any user-facing failure (bad params, permission

Post publishing failed.

TikTok Content Posting API provider using OAuth 2.0.

Facebook Graph API v25.0 provider.

Generic API error from the platform.

OAuth flow failure (invalid code, denied access, etc.).

Orchestrates the publishing of scheduled posts.

Content payload passed to publish_post().

Manager that auto-filters queries by workspace_id. Usage: MyModel.objects.for_workspace(workspace_id).all()

Forces ``secure=True`` so the bearer HTTPS guard doesn't 401 every call.

HMAC-signed client for Intelligence's /internal/v1/. Construct without arguments, pulls config from Django settings. Methods raise typed exce

A media file (image, video, GIF) uploaded to a workspace's media library. Stores the original file plus processed variants for different platform

Syncs inbox messages from all connected social accounts.

Manager that auto-filters queries by organization_id. Usage in views/middleware: set the organization on the manager before querying:

A per-platform variant of a Post. Created for each selected social account when composing. Holds optional caption/media overrides and — cruci

YouTube Data API v3 provider using Google OAuth 2.0.

A TextField that encrypts its value at rest using AES-256-GCM.

A piece of content created in the composer. A Post holds the shared/base content. PlatformPost children hold per-platform overrides **and the

Track API rate limit state per social account per platform. Updated from API response headers after each call.

5xx / network error, transient.

Django test client that forces every request to ``secure=True``. Django's ``Client.get/post`` always pass an explicit ``secure=False`` to ``g

Instagram Graph API provider (via Facebook Graph API v25.0).

LinkedIn provider scoped to Company Page posting.

Stand-in for the ``apps`` arg Django migrations get. The migration only calls ``apps.get_model("api_keys", "ApiKey")``, so we return the live

Form for creating and editing posts in the composer.

No open posting slot exists within the scheduling lookahead horizon.

4xx from /activate-preflight or /activate-commit, payment problem, metadata mismatch, unknown_checkout_attempt, etc.

Form for creating/editing content categories.

The output shape every card / chart consumes.

Analytics for a single per-platform child of a Post.

Media attachment on a post, with ordering and alt text.

Recurring time slot for a social account. Defines default publishing times (e.g., Mon/Wed/Fri at 9 AM) used for queue-based scheduling.

Raised by ``enforce_storage_quota`` when an upload would push usage above the org's resolved limit. The API layer maps this to HTTP 413 with

Local mirror of Intelligence's ``StudioCheckoutAttempt``. Reserved BEFORE the Intelligence ``/studio-checkout-session`` call: - On the Studi

Channel-level analytics summary over a rolling window of days.

4xx that isn't covered by a more specific subclass.

AT Protocol / Bluesky provider. Uses session-based authentication (app passwords), not OAuth. The ``credentials`` dict may contain: - ``

409, idempotency / eligibility blocker.

401/403 indicating the deployment is not registered or is disabled.

A field that stores JSON data encrypted at rest using AES-256-GCM.

Media attachment on an idea, with stable ordering.

Base class, anything client-call-related.

Platform rate limit exceeded.

OAuth2Validator subclass that requires ``code_challenge_method=S256``. Hooks ``is_pkce_required`` because it is the earliest validator method

A reusable tag scoped to a workspace. Tags can be applied to Posts, Ideas, and other content types. They are workspace-scoped so each workspa

Duck-typed stand-in for ``apps.members.models.WorkspaceMembership``. The only attribute ``@require_permission`` reads is ``effective_permissi

Minimal oauthlib-style request for the validator unit tests. Unset attributes read as ``None`` so oauthlib's error constructor — which copies

Ninja ``HttpBearer`` that authenticates Agent API requests. The Ninja contract is: return a truthy value on success (becomes ``request.auth``

Create a draft or directly schedule a post against one account. ``social_account_id`` MUST be in the key's allowlist; the auth class raises 4

Instagram API provider using Instagram Login (OAuth 2.0). Authenticates Professional (Business or Creator) Instagram accounts directly throug

402, Intelligence returned credits=0; show upgrade CTA.

Calls Intelligence's public /v1/ tool endpoints using a per-org ``bb_`` bearer key (decrypted from ``IntelligenceSubscription``).

401, the per-org bearer key was rejected.

Return value of ``issue_api_key`` — the only place plaintext exists.

Bearer auth for the MCP router: bb_studio_ keys OR OAuth 2.1 tokens. A ``bb_studio_`` token reuses the parent ``ApiKeyAuth`` path verbatim —

Echoes everything the key is scoped to so an agent can self-introspect.

Version history for edited media assets. Each edit creates a new version.

Folder for organizing media assets. Max 3 levels of nesting.

404, typically "no pending activation" or "no account".

ApiKey-shaped stand-in for an OAuth-authenticated MCP caller. Exposes exactly the ``ApiKey`` attributes the MCP path touches — the handlers'

Result of splitting a raw bearer string into its three parts.

Analytics for a Post, with per-platform breakdown. Mirrors ``PostResponse``'s parent-Post-with-platform-children shape so agents that already

One metric tile in the per-post analytics drawer.

Immutable snapshot of a post state for version history.

Raised when trying to delete an asset referenced by scheduled posts.

Log entry for every publish attempt (including retries). Retained for 90 days, then cleaned up by a background job.

429, caller is over plan rate limit.