naystack 1.8.12 → 1.8.14

package/dist/auth/instagram/route.cjs.js

@@ -125,40 +125,177 @@ async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
     }
   }
 }
-var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
   "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 
-// src/socials/instagram/utils.ts
-function getInstagramURL(token, path, params) {
-  return `https://graph.instagram.com/v23.0/${path}?${Object.keys(params).map((key) => `${key}=${params[key]}`).join("&")}&access_token=${token}`;
-}
-function getInstagramData(token, path, params = {}, postData) {
-  return fetch(getInstagramURL(token, path, params), {
-    method: postData ? "POST" : "GET",
-    body: JSON.stringify(postData),
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
+// src/socials/meta/request.ts
+function createGraphClient(baseURL) {
+  const buildURL = (token, path, params = {}) => {
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+      if (value !== void 0) search.set(key, String(value));
     }
-  }).then((res) => res.json());
+    search.set("access_token", token);
+    return `${baseURL}/${path}?${search.toString()}`;
+  };
+  const request = async (token, path, options = {}) => {
+    const response = await fetch(buildURL(token, path, options.params), {
+      method: options.method || (options.body ? "POST" : "GET"),
+      headers: {
+        Authorization: `Bearer ${token}`,
+        ...options.body ? { "Content-Type": "application/json" } : {}
+      },
+      ...options.body ? { body: JSON.stringify(options.body) } : {}
+    });
+    return response.json().catch(() => null);
+  };
+  return { buildURL, request };
 }
+function readGraphID(label, result) {
+  if (result?.error) {
+    console.error(`[naystack] ${label} failed: ${result.error.message}`);
+    return null;
+  }
+  return result?.id || null;
+}
+
+// src/socials/instagram/utils.ts
+var client = createGraphClient("https://graph.instagram.com/v23.0");
+var getInstagramData = client.request;
 
 // src/socials/instagram/getters.ts
 var getInstagramUser = (token, id, fields) => {
   return getInstagramData(token, id || "me", {
-    fields: fields ? fields.join(",") : "username,followers_count,media_count"
+    params: {
+      fields: fields ? fields.join(",") : "username,followers_count,media_count"
+    }
   });
 };
+var getInstagramContainerStatus = async (token, id) => {
+  const result = await getInstagramData(token, id, { params: { fields: "status_code,status" } });
+  if (!result?.status_code) return null;
+  return {
+    status: result.status_code,
+    error: result.status_code === "ERROR" ? result.status : void 0
+  };
+};
 
-// src/socials/meta-webhook.ts
+// src/socials/meta/container.ts
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function waitForContainer(getState, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
+  const deadline = Date.now() + timeoutMS;
+  let state = await getState();
+  if (!state) {
+    await sleep(2e3);
+    return null;
+  }
+  while (state?.status === "IN_PROGRESS" && Date.now() < deadline) {
+    await sleep(intervalMS);
+    state = await getState();
+  }
+  return state;
+}
+function createPublisher(platform) {
+  const isReady = async (token, id, label, wait) => {
+    const state = await waitForContainer(
+      () => platform.getStatus(token, id),
+      wait
+    );
+    if (state && state.status !== "FINISHED" && state.status !== "PUBLISHED") {
+      console.error(
+        `[naystack] ${platform.name} ${label} ${id} is ${state.status}${state.error ? `: ${state.error}` : ""}`
+      );
+      return false;
+    }
+    return true;
+  };
+  return {
+    /** Creates a container, waits for it to finish processing, then publishes it. */
+    publish: async (token, params, wait) => {
+      const containerID = await platform.createContainer(token, params);
+      if (!containerID) return null;
+      if (!await isReady(token, containerID, "container", wait)) return null;
+      return platform.publish(token, containerID);
+    },
+    /** Creates and awaits every carousel child, resolving to their ids — or `null` if any failed. */
+    createChildren: async (token, items, wait) => {
+      const children = [];
+      for (const item of items) {
+        const childID = await platform.createContainer(token, {
+          ...item,
+          is_carousel_item: true
+        });
+        if (!childID) return null;
+        if (!await isReady(token, childID, "carousel item", wait))
+          return null;
+        children.push(childID);
+      }
+      return children;
+    }
+  };
+}
+
+// src/socials/instagram/setters.ts
+var publisher = createPublisher({
+  name: "Instagram",
+  getStatus: getInstagramContainerStatus,
+  createContainer: async (token, params) => readGraphID(
+    "Instagram media container",
+    await getInstagramData(token, "me/media", {
+      params,
+      method: "POST"
+    })
+  ),
+  publish: async (token, creationID) => readGraphID(
+    "Instagram publish",
+    await getInstagramData(token, "me/media_publish", {
+      params: { creation_id: creationID },
+      method: "POST"
+    })
+  )
+});
+
+// src/socials/meta/webhook.ts
 var import_server2 = require("next/server");
 
+// src/socials/threads/utils.ts
+var client2 = createGraphClient("https://graph.threads.net/v1.0");
+var getThreadsData = client2.request;
+
+// src/socials/threads/getters.ts
+var getThreadsContainerStatus = async (token, id) => {
+  const result = await getThreadsData(token, id, { params: { fields: "status,error_message" } });
+  if (!result?.status) return null;
+  return { status: result.status, error: result.error_message };
+};
+
+// src/socials/threads/setters.ts
+var publisher2 = createPublisher({
+  name: "Threads",
+  getStatus: getThreadsContainerStatus,
+  createContainer: async (token, params) => readGraphID(
+    "Threads container",
+    await getThreadsData(token, "me/threads", {
+      params,
+      method: "POST"
+    })
+  ),
+  publish: async (token, creationID) => readGraphID(
+    "Threads publish",
+    await getThreadsData(token, "me/threads_publish", {
+      params: { creation_id: creationID },
+      method: "POST"
+    })
+  )
+});
+
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
   redirectURL,
   errorRedirectURL,
-  onUser
+  onUser,
+  scopes
 }) => {
   const handleError = (message) => import_server3.NextResponse.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
@@ -168,7 +305,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return import_server3.NextResponse.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return import_server3.NextResponse.redirect(
+        getInstagramAuthorizationURL(stateToken, scopes),
+        302
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(

package/dist/auth/instagram/route.d.mts

@@ -2,12 +2,14 @@ import { NextRequest, NextResponse } from 'next/server';
 import { SetupInstagramAuthOptions } from './index.mjs';
 import './utils.mjs';
 import '../../socials/instagram/types.mjs';
+import '../../socials/meta/container.mjs';
+import '../../socials/meta/types.mjs';
 
 /**
  * Returns the GET route handler for Instagram OAuth callback.
  * @param options - SetupInstagramAuthOptions (onUser, redirect URLs)
  * @returns Async route handler for the OAuth callback
  */
-declare const getInstagramRoute: ({ redirectURL, errorRedirectURL, onUser, }: SetupInstagramAuthOptions) => (req: NextRequest) => Promise<NextResponse<unknown>>;
+declare const getInstagramRoute: ({ redirectURL, errorRedirectURL, onUser, scopes, }: SetupInstagramAuthOptions) => (req: NextRequest) => Promise<NextResponse<unknown>>;
 
 export { getInstagramRoute };

package/dist/auth/instagram/route.d.ts

@@ -2,12 +2,14 @@ import { NextRequest, NextResponse } from 'next/server';
 import { SetupInstagramAuthOptions } from './index.js';
 import './utils.js';
 import '../../socials/instagram/types.js';
+import '../../socials/meta/container.js';
+import '../../socials/meta/types.js';
 
 /**
  * Returns the GET route handler for Instagram OAuth callback.
  * @param options - SetupInstagramAuthOptions (onUser, redirect URLs)
  * @returns Async route handler for the OAuth callback
  */
-declare const getInstagramRoute: ({ redirectURL, errorRedirectURL, onUser, }: SetupInstagramAuthOptions) => (req: NextRequest) => Promise<NextResponse<unknown>>;
+declare const getInstagramRoute: ({ redirectURL, errorRedirectURL, onUser, scopes, }: SetupInstagramAuthOptions) => (req: NextRequest) => Promise<NextResponse<unknown>>;
 
 export { getInstagramRoute };

package/dist/auth/instagram/route.esm.js

@@ -101,40 +101,177 @@ async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
     }
   }
 }
-var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
   "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 
-// src/socials/instagram/utils.ts
-function getInstagramURL(token, path, params) {
-  return `https://graph.instagram.com/v23.0/${path}?${Object.keys(params).map((key) => `${key}=${params[key]}`).join("&")}&access_token=${token}`;
-}
-function getInstagramData(token, path, params = {}, postData) {
-  return fetch(getInstagramURL(token, path, params), {
-    method: postData ? "POST" : "GET",
-    body: JSON.stringify(postData),
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
+// src/socials/meta/request.ts
+function createGraphClient(baseURL) {
+  const buildURL = (token, path, params = {}) => {
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+      if (value !== void 0) search.set(key, String(value));
     }
-  }).then((res) => res.json());
+    search.set("access_token", token);
+    return `${baseURL}/${path}?${search.toString()}`;
+  };
+  const request = async (token, path, options = {}) => {
+    const response = await fetch(buildURL(token, path, options.params), {
+      method: options.method || (options.body ? "POST" : "GET"),
+      headers: {
+        Authorization: `Bearer ${token}`,
+        ...options.body ? { "Content-Type": "application/json" } : {}
+      },
+      ...options.body ? { body: JSON.stringify(options.body) } : {}
+    });
+    return response.json().catch(() => null);
+  };
+  return { buildURL, request };
 }
+function readGraphID(label, result) {
+  if (result?.error) {
+    console.error(`[naystack] ${label} failed: ${result.error.message}`);
+    return null;
+  }
+  return result?.id || null;
+}
+
+// src/socials/instagram/utils.ts
+var client = createGraphClient("https://graph.instagram.com/v23.0");
+var getInstagramData = client.request;
 
 // src/socials/instagram/getters.ts
 var getInstagramUser = (token, id, fields) => {
   return getInstagramData(token, id || "me", {
-    fields: fields ? fields.join(",") : "username,followers_count,media_count"
+    params: {
+      fields: fields ? fields.join(",") : "username,followers_count,media_count"
+    }
   });
 };
+var getInstagramContainerStatus = async (token, id) => {
+  const result = await getInstagramData(token, id, { params: { fields: "status_code,status" } });
+  if (!result?.status_code) return null;
+  return {
+    status: result.status_code,
+    error: result.status_code === "ERROR" ? result.status : void 0
+  };
+};
 
-// src/socials/meta-webhook.ts
+// src/socials/meta/container.ts
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function waitForContainer(getState, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
+  const deadline = Date.now() + timeoutMS;
+  let state = await getState();
+  if (!state) {
+    await sleep(2e3);
+    return null;
+  }
+  while (state?.status === "IN_PROGRESS" && Date.now() < deadline) {
+    await sleep(intervalMS);
+    state = await getState();
+  }
+  return state;
+}
+function createPublisher(platform) {
+  const isReady = async (token, id, label, wait) => {
+    const state = await waitForContainer(
+      () => platform.getStatus(token, id),
+      wait
+    );
+    if (state && state.status !== "FINISHED" && state.status !== "PUBLISHED") {
+      console.error(
+        `[naystack] ${platform.name} ${label} ${id} is ${state.status}${state.error ? `: ${state.error}` : ""}`
+      );
+      return false;
+    }
+    return true;
+  };
+  return {
+    /** Creates a container, waits for it to finish processing, then publishes it. */
+    publish: async (token, params, wait) => {
+      const containerID = await platform.createContainer(token, params);
+      if (!containerID) return null;
+      if (!await isReady(token, containerID, "container", wait)) return null;
+      return platform.publish(token, containerID);
+    },
+    /** Creates and awaits every carousel child, resolving to their ids — or `null` if any failed. */
+    createChildren: async (token, items, wait) => {
+      const children = [];
+      for (const item of items) {
+        const childID = await platform.createContainer(token, {
+          ...item,
+          is_carousel_item: true
+        });
+        if (!childID) return null;
+        if (!await isReady(token, childID, "carousel item", wait))
+          return null;
+        children.push(childID);
+      }
+      return children;
+    }
+  };
+}
+
+// src/socials/instagram/setters.ts
+var publisher = createPublisher({
+  name: "Instagram",
+  getStatus: getInstagramContainerStatus,
+  createContainer: async (token, params) => readGraphID(
+    "Instagram media container",
+    await getInstagramData(token, "me/media", {
+      params,
+      method: "POST"
+    })
+  ),
+  publish: async (token, creationID) => readGraphID(
+    "Instagram publish",
+    await getInstagramData(token, "me/media_publish", {
+      params: { creation_id: creationID },
+      method: "POST"
+    })
+  )
+});
+
+// src/socials/meta/webhook.ts
 import { NextResponse as NextResponse2 } from "next/server";
 
+// src/socials/threads/utils.ts
+var client2 = createGraphClient("https://graph.threads.net/v1.0");
+var getThreadsData = client2.request;
+
+// src/socials/threads/getters.ts
+var getThreadsContainerStatus = async (token, id) => {
+  const result = await getThreadsData(token, id, { params: { fields: "status,error_message" } });
+  if (!result?.status) return null;
+  return { status: result.status, error: result.error_message };
+};
+
+// src/socials/threads/setters.ts
+var publisher2 = createPublisher({
+  name: "Threads",
+  getStatus: getThreadsContainerStatus,
+  createContainer: async (token, params) => readGraphID(
+    "Threads container",
+    await getThreadsData(token, "me/threads", {
+      params,
+      method: "POST"
+    })
+  ),
+  publish: async (token, creationID) => readGraphID(
+    "Threads publish",
+    await getThreadsData(token, "me/threads_publish", {
+      params: { creation_id: creationID },
+      method: "POST"
+    })
+  )
+});
+
 // src/auth/instagram/route.ts
 var getInstagramRoute = ({
   redirectURL,
   errorRedirectURL,
-  onUser
+  onUser,
+  scopes
 }) => {
   const handleError = (message) => NextResponse3.redirect(`${errorRedirectURL}?error=${message}`);
   return async (req) => {
@@ -144,7 +281,10 @@ var getInstagramRoute = ({
     if (error) return handleError(error);
     if (!accessCode) {
       if (!stateToken) return handleError("Invalid request");
-      return NextResponse3.redirect(getInstagramAuthorizationURL(stateToken), 302);
+      return NextResponse3.redirect(
+        getInstagramAuthorizationURL(stateToken, scopes),
+        302
+      );
     }
     if (!stateToken) return handleError("Invalid request");
     const instagramData = await getLongLivedToken(

package/dist/auth/instagram/utils.cjs.js

@@ -112,9 +112,9 @@ async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
     }
   }
 }
-var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
   "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   getInstagramAuthorizationURL,

package/dist/auth/instagram/utils.d.mts

@@ -1,3 +1,13 @@
+/**
+ * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
+ * is enough to read a profile; publishing needs `instagram_business_content_publish`.
+ *
+ * Widening the scopes only affects users who authorize afterwards — tokens already
+ * stored keep the permissions they were granted, so existing users must reconnect.
+ *
+ * @category Auth
+ */
+type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
 /**
  * Exchanges a long-lived Instagram token for a refreshed token.
  * @param token - Current long-lived access token
@@ -29,6 +39,7 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  * simply built on the server instead of shipped in the client bundle.
  *
  * @param token - The state token to embed in the authorization URL (typically the user's session or access token).
+ * @param scopes - Permissions to request. Default: `["instagram_business_basic"]`.
  * @returns The full Instagram OAuth authorization URL.
  *
  * @example
@@ -41,6 +52,6 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  *
  * @category Auth
  */
-declare const getInstagramAuthorizationURL: (token: string) => string;
+declare const getInstagramAuthorizationURL: (token: string, scopes?: InstagramScope[]) => string;
 
-export { getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };
+export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };

package/dist/auth/instagram/utils.d.ts

@@ -1,3 +1,13 @@
+/**
+ * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
+ * is enough to read a profile; publishing needs `instagram_business_content_publish`.
+ *
+ * Widening the scopes only affects users who authorize afterwards — tokens already
+ * stored keep the permissions they were granted, so existing users must reconnect.
+ *
+ * @category Auth
+ */
+type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
 /**
  * Exchanges a long-lived Instagram token for a refreshed token.
  * @param token - Current long-lived access token
@@ -29,6 +39,7 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  * simply built on the server instead of shipped in the client bundle.
  *
  * @param token - The state token to embed in the authorization URL (typically the user's session or access token).
+ * @param scopes - Permissions to request. Default: `["instagram_business_basic"]`.
  * @returns The full Instagram OAuth authorization URL.
  *
  * @example
@@ -41,6 +52,6 @@ declare function getLongLivedToken(code: string, redirectURL: string, clientId:
  *
  * @category Auth
  */
-declare const getInstagramAuthorizationURL: (token: string) => string;
+declare const getInstagramAuthorizationURL: (token: string, scopes?: InstagramScope[]) => string;
 
-export { getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };
+export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedToken, getRefreshedInstagramAccessToken };

package/dist/auth/instagram/utils.esm.js

@@ -84,9 +84,9 @@ async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
     }
   }
 }
-var getInstagramAuthorizationURL = (token) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
   "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=instagram_business_basic&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 export {
   getInstagramAuthorizationURL,
   getLongLivedToken,

package/dist/file/setup.d.mts

@@ -5,6 +5,12 @@ import '@aws-sdk/client-s3';
 /**
  * Options for setting up file upload via {@link setupFileUpload}.
  *
+ * Every callback receives the same `{ type, userId, data }` context. **`data` is
+ * optional** — it is whatever the caller passed as `config.data` to
+ * `useFileUpload`, and the client only appends the form field when a value is
+ * given, so the route parses it to `undefined` otherwise. Narrow it before use;
+ * destructuring it unguarded throws at runtime.
+ *
  * @property getKey - Optional. Given `{ type, userId, data }`, returns the S3 object key for the upload. If omitted, a UUID is generated.
  * @property processFile - Optional. Given the uploaded `file` and `{ type, userId, data }`, returns the blob to
  *   store in its place — e.g. re-encoding an image, or stripping metadata. Runs after authentication and before the
@@ -22,23 +28,23 @@ interface SetupFileUploadOptions {
     getKey?: (data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<string>;
     processFile?: (file: File, data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<Blob>;
     putOptions?: (data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => PutOverrides;
     onUpload: (data: {
         url: string | null;
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<object>;
 }
 /**
@@ -65,7 +71,9 @@ interface SetupFileUploadOptions {
  * export const { PUT } = setupFileUpload({
  *   onUpload: async ({ url, type, userId, data }) => {
  *     if (type === "DealDocument" && url) {
- *       const payload = data as { dealId: number; fileName: string };
+ *       // `data` is absent unless the client sent one — check before reading it.
+ *       const payload = data as { dealId?: number; fileName?: string } | undefined;
+ *       if (!payload?.dealId) return {};
  *       const [row] = await db.insert(DocumentsTable).values({
  *         dealId: payload.dealId, fileURL: url, fileName: payload.fileName,
  *       }).returning();

package/dist/file/setup.d.ts

@@ -5,6 +5,12 @@ import '@aws-sdk/client-s3';
 /**
  * Options for setting up file upload via {@link setupFileUpload}.
  *
+ * Every callback receives the same `{ type, userId, data }` context. **`data` is
+ * optional** — it is whatever the caller passed as `config.data` to
+ * `useFileUpload`, and the client only appends the form field when a value is
+ * given, so the route parses it to `undefined` otherwise. Narrow it before use;
+ * destructuring it unguarded throws at runtime.
+ *
  * @property getKey - Optional. Given `{ type, userId, data }`, returns the S3 object key for the upload. If omitted, a UUID is generated.
  * @property processFile - Optional. Given the uploaded `file` and `{ type, userId, data }`, returns the blob to
  *   store in its place — e.g. re-encoding an image, or stripping metadata. Runs after authentication and before the
@@ -22,23 +28,23 @@ interface SetupFileUploadOptions {
     getKey?: (data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<string>;
     processFile?: (file: File, data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<Blob>;
     putOptions?: (data: {
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => PutOverrides;
     onUpload: (data: {
         url: string | null;
         type: string;
         userId: number;
-        data: object;
+        data?: object;
     }) => Promise<object>;
 }
 /**
@@ -65,7 +71,9 @@ interface SetupFileUploadOptions {
  * export const { PUT } = setupFileUpload({
  *   onUpload: async ({ url, type, userId, data }) => {
  *     if (type === "DealDocument" && url) {
- *       const payload = data as { dealId: number; fileName: string };
+ *       // `data` is absent unless the client sent one — check before reading it.
+ *       const payload = data as { dealId?: number; fileName?: string } | undefined;
+ *       if (!payload?.dealId) return {};
  *       const [row] = await db.insert(DocumentsTable).values({
  *         dealId: payload.dealId, fileURL: url, fileName: payload.fileName,
  *       }).returning();

package/dist/index.d.mts

@@ -10,7 +10,7 @@
  * - `naystack/file` — S3 file upload setup
  * - `naystack/file/client` — Client-side file upload hook (useFileUpload)
  * - `naystack/client` — Client hooks (useVisibility, useBreakpoint) and SEO (setupSEO)
- * - `naystack/socials` — Instagram and Threads API helpers
+ * - `naystack/socials` — publish to and read from Instagram and Threads
  *
  * @module
  */

package/dist/index.d.ts

@@ -10,7 +10,7 @@
  * - `naystack/file` — S3 file upload setup
  * - `naystack/file/client` — Client-side file upload hook (useFileUpload)
  * - `naystack/client` — Client hooks (useVisibility, useBreakpoint) and SEO (setupSEO)
- * - `naystack/socials` — Instagram and Threads API helpers
+ * - `naystack/socials` — publish to and read from Instagram and Threads
  *
  * @module
  */