feat(instagram): add Instagram integration

[BillLeoutsakosvl346]

Adds Business Login OAuth, 23 tools, block, and publish routes for Instagram

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 10, 2026 10:35pm

[cursor]

PR Summary

High Risk
Adds OAuth, token storage/refresh, and server-side publishing to a third-party API over a large new surface; misconfiguration or ID handling could break connects or duplicate accounts.

Overview
Introduces a full Instagram workflow integration: Business Login OAuth, 23 Graph API tools, a workflow block, docs, and catalog entries.

OAuth and credentials use a dedicated authorize/callback flow (state cookies, short- to long-lived token exchange, accounts keyed by professional user_id). Connect flows reuse shared createConnectDraft (moved out of the generic OAuth2 authorize route). Token refresh adds Meta’s ig_refresh_token strategy; INSTAGRAM_CLIENT_ID / INSTAGRAM_CLIENT_SECRET are optional env vars.

Publishing (image, video, reel, story, carousel) runs through internal API routes that resolve uploads or public HTTPS URLs (longer presigned TTLs via resolveFileInputToUrl), create containers, poll until ready, then publish—carousel routes use higher maxDuration for parallel child polling.

Smaller doc-only updates align Ashby webhook fields, GitLab issue/MR outputs, and Gmail labels typing with current APIs.

^{Reviewed by Cursor Bugbot for commit c3c4f1d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

This PR adds Instagram as a new integration. The main changes are:

• Business Login OAuth routes and callback handling.
• Instagram block metadata, icons, registry entries, and docs.
• Publishing routes for images, videos, reels, stories, and carousels.
• Instagram tools for media, comments, DMs, insights, and publishing.

Confidence Score: 4/5

This is close, but the callback persistence race should be fixed before merging.

• Carousel publishing now creates children before polling, so the URL lifetime issue is addressed for the normal flow.
• The callback now stores the Instagram professional account id, which fixes the wrong-id fallback path.
• The account write is still a read-then-insert without atomic dedupe, so concurrent callbacks can leave duplicate account rows and stale tokens.

apps/sim/app/api/auth/oauth2/callback/instagram/route.ts

Important Files Changed

Filename	Overview
apps/sim/app/api/tools/instagram/publish-carousel/route.ts	Creates child containers before polling and polls children in parallel.
apps/sim/app/api/auth/oauth2/callback/instagram/route.ts	Uses the Instagram professional account id, but still needs atomic account dedupe.

_{Reviews (2): Last reviewed commit: "fix(instagram): normalize Graph ID outpu..." | Re-trigger Greptile}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 05f51a3. Configure here.}

[BillLeoutsakosvl346]

@greptile