SWYTCH OS v1.0 Team Ready — 90 Checks PASS

instagram_content_publish

Publish Reel/Feed/Story with Collab co-authoring and scheduled publish time.

instagram_manage_comments

List comments, search, and hide spam/scam comments without hiding genuine reviews.

instagram_manage_insights

Retrieve Saves, Website Clicks, Shares, Reach, and 24h Heatmap.

instagram_manage_messages (Comment-to-DM)

Automate DM on keyword triggers with strict 24h cooldown, spam filter, and STOP opt-out.

instagram_basic + business_discovery

Query competitor public profile, follower growth, average likes & saves.

hashtag_search

Hashtag intelligence: query recent media counts and engagement rates without auto-actions.

mentions + story_mentions + tags

Fetch UGC story/feed tags and trigger repost workflows.

pages_manage_posts & pages_messaging

Sync published content across 3 connected Facebook Pages.

groups_access_member_info

Inspect group join requests and automate member approvals.

App Events (Unity Bubble Pop Game)

Log and monitor Unity Game telemetry (LevelAchieved, TarotViewed, BubblePopScore).

ads_management (Marketing API Standard Tier)

Auto-create ad creative draft from top performing organic Reel.

whatsapp_business_messaging

Send broadcasts to VIP tester phone numbers with template validation.

WhatsApp Flows + Buttons

Interactive button CTA templates: [Product Link], [Talk to Team].

WhatsApp Analytics

Track delivery rates, open rates, and free conversation quota.

Token Vault Rotation & Key Versioning

AES-256-GCM encryption with multi-version key rings and 45-day auto-refresh cron.

Multi-Account Switcher

Manage 2 Tester profiles (Amber Owner + Naina 850k) with collaborative cross-posting.

Scheduler Queue + Content Publishing Limit

Content publishing limit check (25/day) & isolated 200 reqs/hr Token Bucket per IG.

Media Product Tags (Shoppable Instagram)

Tag products from shiningtarot.com catalog directly on Reels (x, y coordinate pins).

Stories Publishing + Story Insights

Publish 24h ephemeral Story with interactive Link Sticker and track exits, replies, and taps.

User Tags & Tagged Media (UGC Wall)

Query GET /{ig-user-id}/tags to aggregate customer posts and approve 1-click reposts.

Instagram oEmbed Read

Convert public Instagram post/Reel URL into official HTML embed for blog distribution.

Ice Breakers + Persistent Menu

Configures 3 instant quick-reply prompts ("Today's Panchang", "Free Tarot", "Talk to Bhaiya").

Private Replies (Comment to DM v2)

POST /{ig-comment-id}/private_replies to reply privately in direct thread to a specific comment.

Collaborator Invites Management

Inspect status of Collab invites (pending/accepted/declined) and resend triggers.

Recently Searched Hashtags History

Cache recently searched hashtags to avoid Meta's strict 30 queries / 7 days rate limit.

instagram_graph_user_profile (Business Login)

Fallback Instagram OAuth login for creator profiles not connected to a Facebook Page.

Branded Content & Partnerships

Check branded content ad permissions and tag brand partners for Paid Partnership label.

Reels Audio & Remix Analytics

Query audio_title, artist, and track viral reach of trending sounds on Reels.

Page Public Content & Metadata Access

Inspect 100+ public Tarot & Astrology Facebook Pages (fan_count, engagement rate, top posts) without scraping.

Page Mentioning (@[PageID])

POST /{page-id}/feed with @[PageID] mention tag to cross-tag verified business partners on Facebook.

Live Video API (Pages & Groups)

POST /{page-id}/live_videos and /{group-id}/live_videos generating secure RTMP broadcast stream keys.

Page Events & User Events

POST /{page-id}/events creating workshops/Q&As and GET /{page-id}/events tracking RSVPs.

Human Agent Tag (7-Day Messenger Window)

POST /{page-id}/messages with messaging_type=MESSAGE_TAG & tag=HUMAN_AGENT extending 24h window to 7 days.

Business Asset User Profile Access

Enrich inbox comments with commenter verified name, profile picture, and business-scoped ID without requiring email.

Groups — Posting as Page & Anonymous

POST /{group-id}/feed with as_page_id or anonymous post parameter for VIP community groups.

Subscriptions / Webhooks for Facebook Pages

Webhook verification (GET hub.challenge) & real-time event listener (POST) for feed, ratings, mentions, and messaging.

Page Conversations Private Replies

POST /{fb-comment-id}/private_replies to send direct message to commenters on Facebook Page posts.

Facebook Reels & Stories via Page API

POST /{page-id}/video_reels and POST /{page-id}/photos for Facebook Reels & 24h Stories.

Marketing API Access Tier (Standard Access)

Verify Ads Management Standard Access tier with unlimited ad accounts support for scaling viral Reels.

Meta oEmbed for Facebook & Threads

Convert public Facebook Page posts and Threads posts into official responsive HTML embeds.

WhatsApp Calling API (WebRTC & CSW Reset)

POST /{phone-number-id}/calls WebRTC setup. Inbound calls automatically open a 24h Customer Service Window (CSW).

WhatsApp Groups API (Official 2026)

POST /{waba-id}/groups creating 8-participant VIP micro cohorts with Official Business Account (OBA) verification.

Marketing Messages Lite API (MM Lite)

AI-optimized delivery timing endpoint separate from Cloud API delivering +9% higher broadcast inbox penetration.

WhatsApp Commerce, Orders & India UPI Payments

Native Product Catalog, SPM/MPM interactive messages, order webhooks, India UPI payments & PDF auto-delivery.

Business Management API (Phone Numbers & QR Codes)

POST /{phone-number-id}/message_qrdls generating prefilled wa.me campaign QR codes with scan tracking.

WhatsApp Flows (Native In-Chat Forms)

POST /{waba-id}/flows JSON schema (date picker, time picker, location dropdown) with webhook Nakshatra calculation.

Location, Contacts, Reactions & PDF Documents

Send location ("Shining Tarot Office"), contact cards ("Bhaiya"), reactions (auto-react 🙏 to "Jai"), and PDF documents.

Instagram Subscriptions (Paid Creator Subs)

GET /{ig-user-id}/subscriptions to manage paid subscriber-only Panchang & tarot content (₹99/mo).

Facebook Page Insights (Page-Level Analytics)

GET /{page-id}/insights querying page_impressions, page_engaged_users, and page_post_engagements.

Messenger Platform (Persistent Menu & Ice Breakers)

POST /{page-id}/messenger_profile configuring persistent menu and ice breaker quick replies on Facebook Page.

WhatsApp Business Profile Fields

POST /{phone-number-id}/whatsapp_business_profile managing About, Description, Email, Websites, and Vertical directly from SWYTCH OS.

WhatsApp Template Category Auto-Correction Handling

Handles Meta's April 2025 automated category adjustments (e.g. UTILITY auto-corrected to MARKETING) with fallback banners.

Threads API (Publishing & Insights)

POST /{threads-user-id}/threads publishing text and GET /{threads-id}/insights tracking viral reach on Threads.

Instagram Broadcast Channels

POST /{ig-user-id}/broadcast_channels managing 850k creator one-to-many direct subscriber channel broadcasts.

Data Deletion & 90-Day Anonymization (GDPR & Meta Compliance)

GET /api/user/data-export for GDPR takeout and automated 90-day anonymization protocol for historical comments and DMs.

meta_ai_caption_generation (Llama 3)

Meta AI Llama 3 generates 3 high-converting caption hook variants, 15 niche hashtags, and peak time suggestions.

meta_ai_smart_dm (Personalized DM Composer)

Generates personalized dynamic DM replies adapting to user purchase history and query context with STOP & HUMAN footers.

meta_ai_comment_classifier (Spam vs Genuine vs Negative)

AI sentiment classifier ensuring negative customer feedback is NEVER hidden, while spam bots are accurately suppressed.

meta_ai_analytics_interpreter (Strategy & Action Plan)

Synthesizes account insights, competitor growth, and saves metrics into a concrete growth recommendation.

meta_ai_birth_extractor (Hinglish Parser)

Extracts exact Date of Birth, Time, and Location even from unstructured Hinglish conversational typos (e.g. "Mere bete ka 5am birth").

meta_ai_panchang_reader (Vedic Nakshatra Engine)

Generates personalized spiritual readings, planetary rulerships, auspicious Muhurat, and color remedies based on parsed Nakshatra.

meta_ai_dm_auto_reply (24/7 Offline Assistant)

24/7 automated conversational agent answering product queries outside business hours (10pm-8am) using Shining Tarot documentation.

ai_guard_banned_words (AI Hallucination Blocker)

AI Guard leash strictly blocks dangerous words ("die", "death", "curse", "guaranteed profit") before dispatch.

ai_guard_approval_queue (Low Confidence Leash)

Reroutes low-confidence AI replies (< 0.70 threshold) into the Human Approval Queue with [Approve] [Reject] controls.

webhook_plain_text_challenge (Sub-200ms Verification)

Webhook verification handshake returns hub.challenge as raw plain text in < 200ms, satisfying strict Meta SLA.

webhook_timing_safe_signature (HMAC-SHA256 Fortress)

Verifies x-hub-signature-256 header using crypto.timingSafeEqual to eliminate side-channel timing attacks.

webhook_idempotency_dedup (Zero Duplicate DMs)

Deduplicates Meta retry events via messageId idempotency cache to prevent double-messaging and rate limit bans.

webhook_queue_sub200ms (Queue-First Architecture)

Enqueues raw webhook payloads instantly and returns HTTP 200 in < 200ms before processing asynchronously via cron worker.

token_keyring_fallback_decrypt (Deploy Resilience)

Multi-key keyring (v1 active, v0 fallback) automatically decrypts tokens even if active version key ring is rotated.

token_daily_backup_cron (Automated GPG Backup)

Daily automated 3:00 AM backup cron dumps encrypted tokens to gpg archive file outside the primary database.

data_deletion_post_sub2s (Meta Callback Protocol)

POST /api/data-deletion responds in < 2 seconds with JSON confirmation_code and status tracking URL without requiring authentication.

data_deletion_status_public (Incognito Status Lookup)

Public unauthenticated status tracking page at /data-deletion/status?code= displaying deletion execution confirmation.

privacy_policy_62_features_audit (Full Compliance Matrix)

Privacy Policy explicitly lists all 62 features with exact data usage, 90-day anonymization, 7-day raw deletion, and contact details.

knowledge_base_versioning (Versioned Grounding v13)

Versioned knowledge base system (v12, v13...) feeding live catalog truth to Llama 3 with automatic prompt cache invalidation on save.

human_escalation_dm_takeover (Instant Human Handshake)

User typing "HUMAN" or "bhaiya se baat" immediately pauses AI for 24h and routes customer thread to Amber's Human Needed queue.

firebase_auth_role_claims (Owner vs Creator Easy Mode)

Firebase Auth manages custom role claims ("owner" for Amber with full access, "creator" for Naina with Easy Mode lock).

firestore_logs_webhooks (Real-Time Webhook Log Stream)

Real-time Firestore logs_webhooks collection tracking platform, messageId, timingSafe signature validation, and sub-200ms latency.

firestore_logs_publishing (Multi-Destination Media Audit)

Firestore logs_publishing tracking mediaId, destination accounts, captions, and product tag coordinates in real-time.

firestore_logs_ai (AI Brain Audit Trail & Guard Leash)

Firestore logs_ai storing Llama 3 inputs, outputs, confidence score, and AI Guard allow/reject decisions.

prisma_token_vault_firebase_link (Identity-Token Bridge)

Bridges Firebase Uid with PostgreSQL Prisma Token Vault to resolve and decrypt Meta tokens with keyring fallback.

firestore_security_rules_enforcement (Admin & Multi-Role ACL)

Enforces Firestore security rules: Admin & owner permissions (iznoatwork@gmail.com / admin@famous-web.store), safe wallet guards, and multiplayer collections (games, rooms, network_messages).

offline_persistence_queued_logs (IndexedDB Sync)

Enables Firestore IndexedDB offline persistence so logs and analytics queue safely if network connection drops.

team_invite_member (Multi-Role Team Expansion)

Owner invites new team member with pre-assigned role (admin/creator/moderator/viewer) generating WhatsApp/Email invite link and logging to logs_team.

team_role_enforcement_middleware (5-Tier Role Matrix)

Middleware rigorously enforces route access across all 5 roles: owner (full), admin (no /system/billing/team), creator (/ only), moderator (/engagement only), viewer (/analytics only).

team_firestore_rules_role_based (Scoped Logs & Members ACL)

Firestore security rules protect team_members and logs_team collections, allowing owner writes, org-scoped reads, and role-scoped logs access.

team_onboarding_new_member (Auto-Accept & Dynamic Role Landing)

Invited team member entering onboarding auto-accepts invitation, transitions status from invited to active, and lands directly on their dedicated workspace route.

onboarding_invite_detection (Auto-Detect Link & Firebase Link)

Detects ?invite=xxx code or pre-approved email, auto-links Firebase UID to TeamMember, assigns custom claims { role, orgId }, and writes audit logs_team.

onboarding_role_matrix (5-Tier Role Matrix Interactive Checkpoint)

Interactive 5-tier matrix validates access levels across owner, admin, creator, moderator, and viewer with Next.js 16/17 proxy route redirection protection.

onboarding_batch_connects (Multi-Channel Graph v23.0 OAuth Setup)

Guided OAuth onboarding connect flow for Instagram (19 features, Batch 1), Facebook Pages (18 features, Batch 2), and WhatsApp Revenue (18 features, Batch 3) with tester role assistance.

onboarding_master_verification_100 (100% Progress & Role-Based Landing)

Reaches 100% progress checkpoint, triggers full 90-feature live test suite, sets onboarding_completed in analytics, and redirects user to their role-specific operational workspace.