naystack 1.8.18 → 1.9.0

package/dist/{auth/instagram/utils.cjs.js → socials/instagram/auth.cjs.js}

@@ -17,14 +17,14 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/auth/instagram/utils.ts
-var utils_exports = {};
-__export(utils_exports, {
+// src/socials/instagram/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
   getInstagramAuthorizationURL: () => getInstagramAuthorizationURL,
-  getLongLivedToken: () => getLongLivedToken,
-  getRefreshedInstagramAccessToken: () => getRefreshedInstagramAccessToken
+  getLongLivedInstagramToken: () => getLongLivedInstagramToken,
+  refreshInstagramAccessToken: () => refreshInstagramAccessToken
 });
-module.exports = __toCommonJS(utils_exports);
+module.exports = __toCommonJS(auth_exports);
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -36,8 +36,8 @@ var getEnvValue = (key) => {
       return process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT || EXTRA_ENV.EMAIL_AUTH_ENDPOINT;
     case "NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT" /* NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT */:
       return process.env.NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT || EXTRA_ENV.GOOGLE_AUTH_ENDPOINT;
-    case "NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT || EXTRA_ENV.INSTAGRAM_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT" /* NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT || EXTRA_ENV.SOCIAL_AUTH_ENDPOINT;
     case "NEXT_PUBLIC_FILE_ENDPOINT" /* NEXT_PUBLIC_FILE_ENDPOINT */:
       return process.env.NEXT_PUBLIC_FILE_ENDPOINT || EXTRA_ENV.FILE_ENDPOINT;
     case "NEXT_PUBLIC_BASE_URL" /* NEXT_PUBLIC_BASE_URL */:
@@ -76,48 +76,50 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/instagram/utils.ts
-async function getRefreshedInstagramAccessToken(token) {
-  const request = await fetch(
-    `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
-  );
-  const response = await request.json();
-  return response.access_token;
-}
-async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
+// src/socials/instagram/auth.ts
+var getInstagramAuthorizationURL = (state, redirectURI, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+  "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${state}&redirect_uri=${redirectURI}#weblink`;
+async function getLongLivedInstagramToken(code, redirectURI) {
   const formData = new FormData();
-  formData.set("client_id", clientId);
-  formData.set("client_secret", clientSecret);
+  formData.set("client_id", getEnv("INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */));
+  formData.set("client_secret", getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */));
   formData.set("grant_type", "authorization_code");
-  formData.set("redirect_uri", redirectURL);
+  formData.set("redirect_uri", redirectURI);
   formData.set("code", code);
   const shortRes = await fetch("https://api.instagram.com/oauth/access_token", {
     method: "POST",
     body: formData
   });
-  if (shortRes.ok) {
-    const shortResData = await shortRes.json();
-    if (shortResData.access_token) {
-      const shortLivedToken = shortResData.access_token;
-      const longRes = await fetch(
-        `https://graph.instagram.com/access_token?grant_type=ig_exchange_token&access_token=${shortLivedToken}&client_secret=${getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)}`
-      );
-      if (longRes.ok) {
-        const longResData = await longRes.json();
-        return {
-          accessToken: longResData.access_token,
-          userId: shortResData.user_id
-        };
-      }
-    }
-  }
+  if (!shortRes.ok) return void 0;
+  const shortResData = await shortRes.json();
+  if (!shortResData.access_token) return void 0;
+  const longRes = await fetch(
+    `https://graph.instagram.com/access_token?grant_type=ig_exchange_token&access_token=${shortResData.access_token}&client_secret=${getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)}`
+  );
+  if (!longRes.ok) return void 0;
+  const longResData = await longRes.json();
+  return {
+    accessToken: longResData.access_token,
+    userId: shortResData.user_id,
+    expiresIn: longResData.expires_in,
+    permissions: shortResData.permissions
+  };
+}
+async function refreshInstagramAccessToken(token) {
+  const request = await fetch(
+    `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
+  );
+  const response = await request.json();
+  if (!response.access_token) return void 0;
+  return {
+    accessToken: response.access_token,
+    expiresIn: response.expires_in
+  };
 }
-var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
-  "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   getInstagramAuthorizationURL,
-  getLongLivedToken,
-  getRefreshedInstagramAccessToken
+  getLongLivedInstagramToken,
+  refreshInstagramAccessToken
 });

package/dist/socials/instagram/auth.d.mts

@@ -0,0 +1,52 @@
+/**
+ * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
+ * is enough to read a profile; publishing needs `instagram_business_content_publish`.
+ *
+ * Widening the scopes only affects users who authorize afterwards — tokens already
+ * stored keep the permissions they were granted, so existing users must reconnect.
+ *
+ * @category Socials
+ */
+type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
+/**
+ * Builds the Instagram OAuth authorization URL.
+ *
+ * **Server-only** — reads the non-public `INSTAGRAM_CLIENT_ID`. The client id still
+ * ends up in the URL the browser follows; it is simply built here rather than
+ * shipped in the client bundle.
+ *
+ * @param state - Passed back by Instagram on the callback; typically the logged-in user's access token.
+ * @param redirectURI - Where Instagram sends the user back. Must match a URI registered with Meta verbatim.
+ * @param scopes - Default: `["instagram_business_basic"]`.
+ *
+ * @category Socials
+ */
+declare const getInstagramAuthorizationURL: (state: string, redirectURI: string, scopes?: InstagramScope[]) => string;
+/**
+ * Exchanges an OAuth code for a long-lived Instagram access token.
+ *
+ * @param code - Authorization code from the callback.
+ * @param redirectURI - The same URI used to obtain the code.
+ * @returns `{ accessToken, userId, expiresIn, permissions }`, or `undefined` if either exchange failed.
+ *
+ * @category Socials
+ */
+declare function getLongLivedInstagramToken(code: string, redirectURI: string): Promise<{
+    accessToken: string;
+    userId: string | undefined;
+    expiresIn: number;
+    permissions: string[] | undefined;
+} | undefined>;
+/**
+ * Refreshes a long-lived Instagram token.
+ *
+ * @returns `{ accessToken, expiresIn }` (seconds), or `undefined` if the refresh failed.
+ *
+ * @category Socials
+ */
+declare function refreshInstagramAccessToken(token: string): Promise<{
+    accessToken: string;
+    expiresIn: number | undefined;
+} | undefined>;
+
+export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedInstagramToken, refreshInstagramAccessToken };

package/dist/socials/instagram/auth.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Permissions requestable during Instagram Login OAuth. `instagram_business_basic`
+ * is enough to read a profile; publishing needs `instagram_business_content_publish`.
+ *
+ * Widening the scopes only affects users who authorize afterwards — tokens already
+ * stored keep the permissions they were granted, so existing users must reconnect.
+ *
+ * @category Socials
+ */
+type InstagramScope = "instagram_business_basic" | "instagram_business_content_publish" | "instagram_business_manage_messages" | "instagram_business_manage_comments" | "instagram_business_manage_insights";
+/**
+ * Builds the Instagram OAuth authorization URL.
+ *
+ * **Server-only** — reads the non-public `INSTAGRAM_CLIENT_ID`. The client id still
+ * ends up in the URL the browser follows; it is simply built here rather than
+ * shipped in the client bundle.
+ *
+ * @param state - Passed back by Instagram on the callback; typically the logged-in user's access token.
+ * @param redirectURI - Where Instagram sends the user back. Must match a URI registered with Meta verbatim.
+ * @param scopes - Default: `["instagram_business_basic"]`.
+ *
+ * @category Socials
+ */
+declare const getInstagramAuthorizationURL: (state: string, redirectURI: string, scopes?: InstagramScope[]) => string;
+/**
+ * Exchanges an OAuth code for a long-lived Instagram access token.
+ *
+ * @param code - Authorization code from the callback.
+ * @param redirectURI - The same URI used to obtain the code.
+ * @returns `{ accessToken, userId, expiresIn, permissions }`, or `undefined` if either exchange failed.
+ *
+ * @category Socials
+ */
+declare function getLongLivedInstagramToken(code: string, redirectURI: string): Promise<{
+    accessToken: string;
+    userId: string | undefined;
+    expiresIn: number;
+    permissions: string[] | undefined;
+} | undefined>;
+/**
+ * Refreshes a long-lived Instagram token.
+ *
+ * @returns `{ accessToken, expiresIn }` (seconds), or `undefined` if the refresh failed.
+ *
+ * @category Socials
+ */
+declare function refreshInstagramAccessToken(token: string): Promise<{
+    accessToken: string;
+    expiresIn: number | undefined;
+} | undefined>;
+
+export { type InstagramScope, getInstagramAuthorizationURL, getLongLivedInstagramToken, refreshInstagramAccessToken };

package/dist/{auth/instagram/utils.esm.js → socials/instagram/auth.esm.js}

@@ -8,8 +8,8 @@ var getEnvValue = (key) => {
       return process.env.NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT || EXTRA_ENV.EMAIL_AUTH_ENDPOINT;
     case "NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT" /* NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT */:
       return process.env.NEXT_PUBLIC_GOOGLE_AUTH_ENDPOINT || EXTRA_ENV.GOOGLE_AUTH_ENDPOINT;
-    case "NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */:
-      return process.env.NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT || EXTRA_ENV.INSTAGRAM_AUTH_ENDPOINT;
+    case "NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT" /* NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT */:
+      return process.env.NEXT_PUBLIC_SOCIAL_AUTH_ENDPOINT || EXTRA_ENV.SOCIAL_AUTH_ENDPOINT;
     case "NEXT_PUBLIC_FILE_ENDPOINT" /* NEXT_PUBLIC_FILE_ENDPOINT */:
       return process.env.NEXT_PUBLIC_FILE_ENDPOINT || EXTRA_ENV.FILE_ENDPOINT;
     case "NEXT_PUBLIC_BASE_URL" /* NEXT_PUBLIC_BASE_URL */:
@@ -48,47 +48,49 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/instagram/utils.ts
-async function getRefreshedInstagramAccessToken(token) {
-  const request = await fetch(
-    `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
-  );
-  const response = await request.json();
-  return response.access_token;
-}
-async function getLongLivedToken(code, redirectURL, clientId, clientSecret) {
+// src/socials/instagram/auth.ts
+var getInstagramAuthorizationURL = (state, redirectURI, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
+  "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
+)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${state}&redirect_uri=${redirectURI}#weblink`;
+async function getLongLivedInstagramToken(code, redirectURI) {
   const formData = new FormData();
-  formData.set("client_id", clientId);
-  formData.set("client_secret", clientSecret);
+  formData.set("client_id", getEnv("INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */));
+  formData.set("client_secret", getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */));
   formData.set("grant_type", "authorization_code");
-  formData.set("redirect_uri", redirectURL);
+  formData.set("redirect_uri", redirectURI);
   formData.set("code", code);
   const shortRes = await fetch("https://api.instagram.com/oauth/access_token", {
     method: "POST",
     body: formData
   });
-  if (shortRes.ok) {
-    const shortResData = await shortRes.json();
-    if (shortResData.access_token) {
-      const shortLivedToken = shortResData.access_token;
-      const longRes = await fetch(
-        `https://graph.instagram.com/access_token?grant_type=ig_exchange_token&access_token=${shortLivedToken}&client_secret=${getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)}`
-      );
-      if (longRes.ok) {
-        const longResData = await longRes.json();
-        return {
-          accessToken: longResData.access_token,
-          userId: shortResData.user_id
-        };
-      }
-    }
-  }
+  if (!shortRes.ok) return void 0;
+  const shortResData = await shortRes.json();
+  if (!shortResData.access_token) return void 0;
+  const longRes = await fetch(
+    `https://graph.instagram.com/access_token?grant_type=ig_exchange_token&access_token=${shortResData.access_token}&client_secret=${getEnv("INSTAGRAM_CLIENT_SECRET" /* INSTAGRAM_CLIENT_SECRET */)}`
+  );
+  if (!longRes.ok) return void 0;
+  const longResData = await longRes.json();
+  return {
+    accessToken: longResData.access_token,
+    userId: shortResData.user_id,
+    expiresIn: longResData.expires_in,
+    permissions: shortResData.permissions
+  };
+}
+async function refreshInstagramAccessToken(token) {
+  const request = await fetch(
+    `https://graph.instagram.com/refresh_access_token?grant_type=ig_refresh_token&access_token=${token}`
+  );
+  const response = await request.json();
+  if (!response.access_token) return void 0;
+  return {
+    accessToken: response.access_token,
+    expiresIn: response.expires_in
+  };
 }
-var getInstagramAuthorizationURL = (token, scopes = ["instagram_business_basic"]) => `https://www.instagram.com/oauth/authorize/?client_id=${getEnv(
-  "INSTAGRAM_CLIENT_ID" /* INSTAGRAM_CLIENT_ID */
-)}&response_type=code&enable_fb_login=0&force_authentication=1&scope=${scopes.join(",")}&state=${token}&redirect_uri=${getEnv("NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT" /* NEXT_PUBLIC_INSTAGRAM_AUTH_ENDPOINT */)}#weblink`;
 export {
   getInstagramAuthorizationURL,
-  getLongLivedToken,
-  getRefreshedInstagramAccessToken
+  getLongLivedInstagramToken,
+  refreshInstagramAccessToken
 };

package/dist/socials/instagram/getters.d.mts

@@ -1,6 +1,7 @@
 import { GraphError, ContainerState } from '../meta/types.mjs';
 import { InstagramConversation, InstagramMedia, InstagramMessage, InstagramUser } from './types.mjs';
 import '../meta/container.mjs';
+import '../utils/poll.mjs';
 
 /**
  * Fetches an Instagram user's profile. Defaults to the authenticated user (`"me"`).

package/dist/socials/instagram/getters.d.ts

@@ -1,6 +1,7 @@
 import { GraphError, ContainerState } from '../meta/types.js';
 import { InstagramConversation, InstagramMedia, InstagramMessage, InstagramUser } from './types.js';
 import '../meta/container.js';
+import '../utils/poll.js';
 
 /**
  * Fetches an Instagram user's profile. Defaults to the authenticated user (`"me"`).

package/dist/socials/instagram/setters.cjs.js

@@ -71,25 +71,42 @@ var getInstagramContainerStatus = async (token, id) => {
   };
 };
 
-// src/socials/meta/container.ts
+// src/socials/utils/poll.ts
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-async function waitForContainer(getState, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
+async function pollUntilReady(read, isPending, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
   const deadline = Date.now() + timeoutMS;
-  let state = await getState();
+  let state = await read();
   if (!state) {
     await sleep(2e3);
     return null;
   }
-  while (state?.status === "IN_PROGRESS" && Date.now() < deadline) {
+  while (state && isPending(state) && Date.now() < deadline) {
     await sleep(intervalMS);
-    state = await getState();
+    state = await read();
   }
   return state;
 }
+async function withRetry(run, options = {}) {
+  const attempts = Math.max(1, options.attempts ?? 3);
+  const backoffMS = options.backoffMS ?? 2e3;
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    const result = await run(attempt);
+    if (result) return result;
+    if (attempt < attempts) {
+      const delayMS = backoffMS * 2 ** (attempt - 1);
+      options.onRetry?.(attempt, attempts, delayMS);
+      await sleep(delayMS);
+    }
+  }
+  return null;
+}
+
+// src/socials/meta/container.ts
 function createPublisher(platform) {
   const isReady = async (token, id, label, wait) => {
-    const state = await waitForContainer(
+    const state = await pollUntilReady(
       () => platform.getStatus(token, id),
+      (current) => current.status === "IN_PROGRESS",
       wait
     );
     if (state && state.status !== "FINISHED" && state.status !== "PUBLISHED") {
@@ -100,22 +117,21 @@ function createPublisher(platform) {
     }
     return true;
   };
-  const createReady = async (token, params, label, wait, retry) => {
-    const attempts = Math.max(1, retry?.attempts ?? 3);
-    const backoffMS = retry?.backoffMS ?? 2e3;
-    for (let attempt = 1; attempt <= attempts; attempt++) {
+  const createReady = (token, params, label, wait, retry) => withRetry(
+    async () => {
       const id = await platform.createContainer(token, params);
-      if (id && await isReady(token, id, label, wait)) return id;
-      if (attempt < attempts) {
-        const delay = backoffMS * 2 ** (attempt - 1);
+      if (!id || !await isReady(token, id, label, wait)) return null;
+      return id;
+    },
+    {
+      ...retry,
+      onRetry: (attempt, attempts, delayMS) => {
         console.warn(
-          `[naystack] ${platform.name} ${label} attempt ${attempt}/${attempts} failed \u2014 retrying in ${delay}ms`
+          `[naystack] ${platform.name} ${label} attempt ${attempt}/${attempts} failed \u2014 retrying in ${delayMS}ms`
         );
-        await sleep(delay);
       }
     }
-    return null;
-  };
+  );
   return {
     /** Creates a container, waits for it to finish processing, then publishes it. */
     publish: async (token, params, wait, retry) => {
@@ -129,21 +145,30 @@ function createPublisher(platform) {
       if (!containerID) return null;
       return platform.publish(token, containerID);
     },
-    /** Creates and awaits every carousel child, resolving to their ids — or `null` if any failed. */
+    /**
+     * Creates and awaits every carousel child **in parallel**, resolving to
+     * their ids in input order — or `null` if any failed.
+     *
+     * Parallel because each child is an independent create-then-poll and Meta
+     * spends ~5s accepting a single container, so ten sequential children cost
+     * ~50s of mostly waiting — past what a serverless caller can fit in its
+     * timeout. `Promise.all` preserves input order, which the carousel's slide
+     * order depends on.
+     */
     createChildren: async (token, items, wait, retry) => {
-      const children = [];
-      for (const item of items) {
-        const childID = await createReady(
-          token,
-          { ...item, is_carousel_item: true },
-          "carousel item",
-          wait,
-          retry
-        );
-        if (!childID) return null;
-        children.push(childID);
-      }
-      return children;
+      const children = await Promise.all(
+        items.map(
+          (item) => createReady(
+            token,
+            { ...item, is_carousel_item: true },
+            "carousel item",
+            wait,
+            retry
+          )
+        )
+      );
+      const created = children.filter((childID) => childID !== null);
+      return created.length === children.length ? created : null;
     }
   };
 }

package/dist/socials/instagram/setters.d.mts

@@ -1,6 +1,7 @@
 import { GraphError } from '../meta/types.mjs';
 import { InstagramPostInput } from './types.mjs';
 import '../meta/container.mjs';
+import '../utils/poll.mjs';
 
 /**
  * Publishes to Instagram — feed image, reel, story or carousel, chosen from the

package/dist/socials/instagram/setters.d.ts

@@ -1,6 +1,7 @@
 import { GraphError } from '../meta/types.js';
 import { InstagramPostInput } from './types.js';
 import '../meta/container.js';
+import '../utils/poll.js';
 
 /**
  * Publishes to Instagram — feed image, reel, story or carousel, chosen from the

package/dist/socials/instagram/setters.esm.js

@@ -43,25 +43,42 @@ var getInstagramContainerStatus = async (token, id) => {
   };
 };
 
-// src/socials/meta/container.ts
+// src/socials/utils/poll.ts
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-async function waitForContainer(getState, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
+async function pollUntilReady(read, isPending, { intervalMS = 5e3, timeoutMS = 3e5 } = {}) {
   const deadline = Date.now() + timeoutMS;
-  let state = await getState();
+  let state = await read();
   if (!state) {
     await sleep(2e3);
     return null;
   }
-  while (state?.status === "IN_PROGRESS" && Date.now() < deadline) {
+  while (state && isPending(state) && Date.now() < deadline) {
     await sleep(intervalMS);
-    state = await getState();
+    state = await read();
   }
   return state;
 }
+async function withRetry(run, options = {}) {
+  const attempts = Math.max(1, options.attempts ?? 3);
+  const backoffMS = options.backoffMS ?? 2e3;
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    const result = await run(attempt);
+    if (result) return result;
+    if (attempt < attempts) {
+      const delayMS = backoffMS * 2 ** (attempt - 1);
+      options.onRetry?.(attempt, attempts, delayMS);
+      await sleep(delayMS);
+    }
+  }
+  return null;
+}
+
+// src/socials/meta/container.ts
 function createPublisher(platform) {
   const isReady = async (token, id, label, wait) => {
-    const state = await waitForContainer(
+    const state = await pollUntilReady(
       () => platform.getStatus(token, id),
+      (current) => current.status === "IN_PROGRESS",
       wait
     );
     if (state && state.status !== "FINISHED" && state.status !== "PUBLISHED") {
@@ -72,22 +89,21 @@ function createPublisher(platform) {
     }
     return true;
   };
-  const createReady = async (token, params, label, wait, retry) => {
-    const attempts = Math.max(1, retry?.attempts ?? 3);
-    const backoffMS = retry?.backoffMS ?? 2e3;
-    for (let attempt = 1; attempt <= attempts; attempt++) {
+  const createReady = (token, params, label, wait, retry) => withRetry(
+    async () => {
       const id = await platform.createContainer(token, params);
-      if (id && await isReady(token, id, label, wait)) return id;
-      if (attempt < attempts) {
-        const delay = backoffMS * 2 ** (attempt - 1);
+      if (!id || !await isReady(token, id, label, wait)) return null;
+      return id;
+    },
+    {
+      ...retry,
+      onRetry: (attempt, attempts, delayMS) => {
         console.warn(
-          `[naystack] ${platform.name} ${label} attempt ${attempt}/${attempts} failed \u2014 retrying in ${delay}ms`
+          `[naystack] ${platform.name} ${label} attempt ${attempt}/${attempts} failed \u2014 retrying in ${delayMS}ms`
         );
-        await sleep(delay);
       }
     }
-    return null;
-  };
+  );
   return {
     /** Creates a container, waits for it to finish processing, then publishes it. */
     publish: async (token, params, wait, retry) => {
@@ -101,21 +117,30 @@ function createPublisher(platform) {
       if (!containerID) return null;
       return platform.publish(token, containerID);
     },
-    /** Creates and awaits every carousel child, resolving to their ids — or `null` if any failed. */
+    /**
+     * Creates and awaits every carousel child **in parallel**, resolving to
+     * their ids in input order — or `null` if any failed.
+     *
+     * Parallel because each child is an independent create-then-poll and Meta
+     * spends ~5s accepting a single container, so ten sequential children cost
+     * ~50s of mostly waiting — past what a serverless caller can fit in its
+     * timeout. `Promise.all` preserves input order, which the carousel's slide
+     * order depends on.
+     */
     createChildren: async (token, items, wait, retry) => {
-      const children = [];
-      for (const item of items) {
-        const childID = await createReady(
-          token,
-          { ...item, is_carousel_item: true },
-          "carousel item",
-          wait,
-          retry
-        );
-        if (!childID) return null;
-        children.push(childID);
-      }
-      return children;
+      const children = await Promise.all(
+        items.map(
+          (item) => createReady(
+            token,
+            { ...item, is_carousel_item: true },
+            "carousel item",
+            wait,
+            retry
+          )
+        )
+      );
+      const created = children.filter((childID) => childID !== null);
+      return created.length === children.length ? created : null;
     }
   };
 }

package/dist/socials/instagram/types.d.mts

@@ -1,5 +1,6 @@
-import { WaitForContainerOptions, RetryOptions } from '../meta/container.mjs';
+import { WaitForContainerOptions } from '../meta/container.mjs';
 import { MetaMediaType } from '../meta/types.mjs';
+import { RetryOptions } from '../utils/poll.mjs';
 
 /**
  * Instagram Messaging API message shape.

package/dist/socials/instagram/types.d.ts

@@ -1,5 +1,6 @@
-import { WaitForContainerOptions, RetryOptions } from '../meta/container.js';
+import { WaitForContainerOptions } from '../meta/container.js';
 import { MetaMediaType } from '../meta/types.js';
+import { RetryOptions } from '../utils/poll.js';
 
 /**
  * Instagram Messaging API message shape.