feat(instagram): add Instagram integration by BillLeoutsakosvl346 · Pull Request #5568 · simstudioai/sim

BillLeoutsakosvl346 · 2026-07-10T20:16:57Z

Summary

Adds Business Login OAuth, 23 tools, block, and publish routes for Instagram

Type of Change

New Feature

Testing

Tested manually

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Resolve UserFiles to Meta-fetchable presigned HTTPS URLs (600s TTL) via internal publish routes, and fix OAuth scope storage plus connect-draft wiring so Instagram Login publishing is testable end-to-end. Co-authored-by: Cursor <cursoragent@cursor.com>

…an up types

vercel · 2026-07-10T20:17:03Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 15, 2026 6:23pm

cursor · 2026-07-10T20:17:08Z

PR Summary

High Risk
Touches OAuth token refresh and new Instagram auth/callback paths plus large third-party publishing surface; TikTok upload and webhook dispatch behavior also change in production.

Overview
Adds a full Instagram integration: dedicated OAuth authorize/callback (short- to long-lived token exchange, account persistence, credential drafts), proactive long-lived token refresh in shared OAuth helpers, env vars for Meta app credentials, a large workflow block (toolbar-hidden until approval) with many operations, server routes to publish image/video/reel/story/carousel and download media (carousel rollback, size limits), plus a cloud storage status API and UI gating when requiresCloudStorage is set so publish inputs need S3/Azure public URLs.

TikTok changes in the same PR: video draft upload now streams from storage with bounded chunking/retries instead of buffering the whole file; Direct Post returns 400 until per-post approval exists; webhook ingress fans out in fixed-size keyset pages with chained durable jobs. OAuth connect-draft creation is centralized in createConnectDraft for generic OAuth2 authorize and Instagram.

^{Reviewed by Cursor Bugbot for commit 952399a. Bugbot is set up for automated code reviews on this repo. Configure here.}

greptile-apps · 2026-07-10T20:19:23Z

Greptile Summary

This PR adds Instagram integration support across OAuth, blocks, tools, and publishing routes. The main changes are:

Instagram Business Login OAuth and callback handling.
Instagram block registration and icon support.
Instagram media publish, download, messaging, profile, and insights tools.
File upload and cloud-storage support for Instagram publishing.
Tests and contract updates for the new Instagram and related media flows.

Confidence Score: 5/5

This looks safe to merge.

No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
apps/sim/app/api/tools/instagram/publish-carousel/route.ts	Adds the carousel publish route with child container creation, parallel child readiness checks, parent creation, and publish handling.
apps/sim/app/api/auth/oauth2/callback/instagram/route.ts	Adds the Instagram OAuth callback flow with token exchange, profile lookup, account persistence, and credential draft processing.
apps/sim/app/api/auth/oauth/utils.ts	Extends OAuth token helpers with Instagram proactive refresh handling.

_{Reviews (3): Last reviewed commit: "fix(instagram): drop hidden Instagram fr..." | Re-trigger Greptile}

…s, extend poll window and insights periods, use canonical user_id in OAuth callback

…r_id Co-authored-by: Cursor <cursoragent@cursor.com>

…ts, request message timestamps explicitly Co-authored-by: Cursor <cursoragent@cursor.com>

…trim() calls are safe Co-authored-by: Cursor <cursoragent@cursor.com>

BillLeoutsakosvl346 · 2026-07-10T21:04:08Z

@greptile

Match the official Instagram look by filling the tile with the orange–pink–purple radial gradient so the white camera glyph sits on a full-bleed brand background. Co-authored-by: Cursor <cursoragent@cursor.com>

Default Reel share-to-feed to Yes, drop unused media fields params, share publish transform helpers, and warn when cloud storage is missing for Meta-fetchable uploads. Co-authored-by: Cursor <cursoragent@cursor.com>

Treat loading/error as blocked for requiresCloudStorage uploads, show the warning once the check finishes, and disable selecting local workspace files Meta cannot fetch. Co-authored-by: Cursor <cursoragent@cursor.com>

Meta only allows refreshing still-valid Instagram tokens, so refresh within 14 days of expiry (after the 24h age gate) instead of waiting until after accessTokenExpiresAt. Co-authored-by: Cursor <cursoragent@cursor.com>

The staging merge dropped the opening /** on ProviderAuthConfig.clientIdParamName, which broke TypeScript parse in CI. Co-authored-by: Cursor <cursoragent@cursor.com>

Wire /api/files/storage-status through a shared route contract so the strict API validation audit stays at zero non-Zod routes after the new Instagram cloud-storage check. Co-authored-by: Cursor <cursoragent@cursor.com>

Drop public-URL paste hints from advanced fields and the cloud-storage banner so the UI mirrors Gmail attachments. Co-authored-by: Cursor <cursoragent@cursor.com>

…integration # Conflicts: # apps/sim/lib/uploads/utils/file-utils.server.ts

…integration

Instagram is hideFromToolbar so it is excluded from integrations.json; the pinned slug map must not expect it until the block is visible again. Co-authored-by: Cursor <cursoragent@cursor.com>

icecrasher321 · 2026-07-15T18:13:54Z

bugbot run

icecrasher321 · 2026-07-15T18:14:05Z

@greptile

cursor · 2026-07-15T18:21:02Z

      workflow: workflowRecord,
    }))
+  const nextCursor = rows.at(-1)?.webhookId ?? null
+  const hasMore = rows.length === TIKTOK_WEBHOOK_TARGET_PAGE_SIZE


TikTok page hasMore false positive

Low Severity

Keyset pagination uses limit(PAGE_SIZE) and sets hasMore when rows.length === PAGE_SIZE instead of fetching PAGE_SIZE + 1 to peek. When a delivery has exactly 100 matching rows, ingress enqueues a continuation page that returns no targets, adding avoidable job churn under the shared concurrency limit.

Additional Locations (1)

apps/sim/background/tiktok-webhook-ingress.ts#L49-L53

^{Reviewed by Cursor Bugbot for commit 30de5b1. Configure here.}

Avoid orphan pending credential drafts when INSTAGRAM_CLIENT_ID is missing, matching the Shopify authorize ordering. Co-authored-by: Cursor <cursoragent@cursor.com>

cursor

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

There are 3 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 952399a. Configure here.}

cursor · 2026-07-15T18:31:10Z

+        pendingCredentialDraft.workspaceId,
+      ],
+      set: { displayName, expiresAt, createdAt: now },
+    })


Stale reconnect draft survives upsert

Medium Severity

createConnectDraft upserts on (userId, providerId, workspaceId) but does not reset credentialId, unlike the credential draft API which sets credentialId to null for new connects. Instagram authorize uses this helper whenever workspaceId is present, so an unexpired reconnect draft can make a new Copilot Instagram connect run as a reconnect and attach the wrong credential.

Additional Locations (1)

apps/sim/app/api/auth/instagram/authorize/route.ts#L45-L50

^{Reviewed by Cursor Bugbot for commit 952399a. Configure here.}

cursor · 2026-07-15T18:31:10Z

+  return {
+    chunkSize: DEFAULT_CHUNK_SIZE,
+    totalChunkCount: Math.floor(totalBytes / DEFAULT_CHUNK_SIZE),
+  }


Single-chunk TikTok size mismatch

Medium Severity

computeTikTokChunkPlan only sets chunkSize equal to totalBytes when the file is at most 10MB. For sizes in (10MB, 20MB), Math.floor yields totalChunkCount: 1 while chunkSize stays 10MB, so init metadata disagrees with the single uploaded range. TikTok expects chunk_size to match video_size for one-chunk uploads, so common draft uploads in that size band can fail at init or transfer.

Additional Locations (1)

apps/sim/app/api/tools/tiktok/publish-video/route.ts#L110-L118

^{Reviewed by Cursor Bugbot for commit 952399a. Configure here.}

Bill Leoutsakos and others added 3 commits July 9, 2026 17:25

feat(instagram): add Instagram Login OAuth, tools, and block

41e0e64

refactor(instagram): simplify messaging tools to direct requests, cle…

5897592

…an up types

cursor Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/app/api/tools/instagram/publish-carousel/route.ts

Comment thread apps/sim/lib/integrations/instagram/resolve-media.ts

Comment thread apps/sim/tools/instagram/utils.ts

Comment thread apps/sim/blocks/blocks/instagram.ts

greptile-apps Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/app/api/tools/instagram/publish-carousel/route.ts Outdated

Comment thread apps/sim/app/api/auth/oauth2/callback/instagram/route.ts Outdated

fix(instagram): parallelize carousel child polling, enforce 2-10 item…

363a68e

…s, extend poll window and insights periods, use canonical user_id in OAuth callback

cursor Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/tools/instagram/utils.ts Outdated

Comment thread apps/sim/app/api/auth/oauth2/callback/instagram/route.ts

vercel Bot deployed to Preview July 10, 2026 20:34 View deployment

fix(instagram): resolve user id from user_id only, accept numeric use…

e310f97

…r_id Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 10, 2026 20:41 Inactive

cursor Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/tools/instagram/reply_to_comment.ts

Comment thread apps/sim/tools/instagram/utils.ts Outdated

Comment thread apps/sim/tools/instagram/get_conversation_messages.ts

fix(instagram): use form/query params for publish and comment endpoin…

05f51a3

…ts, request message timestamps explicitly Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 10, 2026 20:49 Inactive

cursor Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/tools/instagram/get_profile.ts Outdated

fix(instagram): normalize Graph ID outputs to strings so downstream .…

293230a

…trim() calls are safe Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 10, 2026 20:58 Inactive

greptile-apps Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread apps/sim/app/api/auth/oauth2/callback/instagram/route.ts

style(instagram): use brand gradient tile for the block icon

c3c4f1d

Match the official Instagram look by filling the tile with the orange–pink–purple radial gradient so the white camera glyph sits on a full-bleed brand background. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 10, 2026 22:35 Inactive

fix(instagram): tighten publish defaults and cloud-storage upload UX

9236d5b

Default Reel share-to-feed to Yes, drop unused media fields params, share publish transform helpers, and warn when cloud storage is missing for Meta-fetchable uploads. Co-authored-by: Cursor <cursoragent@cursor.com>

cursor Bot reviewed Jul 12, 2026

View reviewed changes

Comment thread ...mponents/panel/components/editor/components/sub-block/components/file-upload/file-upload.tsx Outdated

fix(instagram): fail closed when cloud storage status is unknown

f8c9516

Treat loading/error as blocked for requiresCloudStorage uploads, show the warning once the check finishes, and disable selecting local workspace files Meta cannot fetch. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 12, 2026 00:33 Inactive

cursor Bot reviewed Jul 12, 2026

View reviewed changes

Comment thread apps/sim/lib/oauth/oauth.ts

vercel Bot temporarily deployed to Preview July 12, 2026 00:38 Inactive

cursor Bot reviewed Jul 12, 2026

View reviewed changes

Comment thread apps/sim/lib/integrations/instagram/resolve-media.ts

Merge branch 'staging' into feature/instagram-integration

6720e40

cursor Bot reviewed Jul 12, 2026

View reviewed changes

Comment thread apps/sim/tools/instagram/index.ts

fix(oauth): restore TikTok clientIdParamName JSDoc after merge

7a6f33a

The staging merge dropped the opening /** on ProviderAuthConfig.clientIdParamName, which broke TypeScript parse in CI. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 12, 2026 00:49 Inactive

vercel Bot deployed to Preview July 12, 2026 00:57 View deployment

fix(instagram): match Gmail advanced media placeholders

24bdce9

Drop public-URL paste hints from advanced fields and the cloud-storage banner so the UI mirrors Gmail attachments. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 12, 2026 01:10 Inactive

Merge branch 'staging' into feature/instagram-integration

b247bb1

vercel Bot deployed to Preview July 13, 2026 22:14 View deployment

icecrasher321 self-assigned this Jul 13, 2026

icecrasher321 added 3 commits July 13, 2026 15:19

Merge remote-tracking branch 'origin/staging' into feature/instagram-…

5952e1d

…integration # Conflicts: # apps/sim/lib/uploads/utils/file-utils.server.ts

Merge remote-tracking branch 'origin/staging' into feature/instagram-…

3ba73dc

…integration

code review + hide from toolbar

0fa622c

vercel Bot deployed to Preview July 13, 2026 23:29 View deployment

address comments

b2238e7

vercel Bot temporarily deployed to Preview July 14, 2026 00:00 Inactive

fix(instagram): drop hidden Instagram from OAuth catalog pin test

30de5b1

Instagram is hideFromToolbar so it is excluded from integrations.json; the pinned slug map must not expect it until the block is visible again. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 15, 2026 18:10 Inactive

cursor Bot reviewed Jul 15, 2026

View reviewed changes

fix(instagram): validate client ID before creating connect draft

952399a

Avoid orphan pending credential drafts when INSTAGRAM_CLIENT_ID is missing, matching the Shopify authorize ordering. Co-authored-by: Cursor <cursoragent@cursor.com>

vercel Bot temporarily deployed to Preview July 15, 2026 18:23 Inactive

cursor Bot reviewed Jul 15, 2026

View reviewed changes

BillLeoutsakosvl346 merged commit e2ea49e into staging Jul 15, 2026
17 checks passed

waleedlatif1 deleted the feature/instagram-integration branch July 15, 2026 20:01

Uh oh!

Conversation

BillLeoutsakosvl346 commented Jul 10, 2026 • edited by icecrasher321 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Uh oh!

vercel Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Jul 10, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

icecrasher321 commented Jul 15, 2026

Uh oh!

icecrasher321 commented Jul 15, 2026

Uh oh!

Uh oh!

Uh oh!

cursor Bot Jul 15, 2026

Choose a reason for hiding this comment

TikTok page hasMore false positive

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jul 15, 2026

Choose a reason for hiding this comment

Stale reconnect draft survives upsert

Uh oh!

cursor Bot Jul 15, 2026

Choose a reason for hiding this comment

Single-chunk TikTok size mismatch

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

BillLeoutsakosvl346 commented Jul 10, 2026 •

edited by icecrasher321

Loading

vercel Bot commented Jul 10, 2026 •

edited

Loading

cursor Bot commented Jul 10, 2026 •

edited

Loading

greptile-apps Bot commented Jul 10, 2026 •

edited

Loading