Connect the Pages a login only reaches through a Business Portfolio

.env.example

@@ -14,6 +14,7 @@ SELF_HOSTED=true
 # Allow more than one connected account per social network in a workspace.
 # Independent of SELF_HOSTED (Cloud default is false). Self-hosted typically wants true.
 ALLOW_MULTIPLE_SOCIAL_ACCOUNTS=true
+META_PAGE_WALK_SECONDS=20
 
 # Passport OAuth keys (API tokens / MCP). Prefer env vars over key files so
 # every node behind a load balancer shares the same key pair. Use literal \n

CLAUDE.md

@@ -208,6 +208,12 @@ Vue components must have a single root element.
 
 - Always use arrow functions in Vue components and TypeScript files. Never use `function` declarations.
 
+## Inertia SSR
+
+- This project does **not** run Inertia SSR. `config/inertia.php` defaults `ssr.enabled` to `false` and nothing in the repo sets `INERTIA_SSR_ENABLED`.
+- Keep it off. With it on, every test rendering an Inertia page issues a real HTTP request to the SSR endpoint, which fails silently and falls back to client rendering — slow, and it hides missing `Http::fake()` stubs.
+- The build wiring is still shipped (`resources/js/ssr.ts`, `vite.config.ts`, `npm run build:ssr` in `docker/Dockerfile`). Turning SSR on means building that bundle and running `inertia:start-ssr` alongside the app, not just flipping the env.
+
 ## Dialogs
 
 - In `<DialogFooter>`, put the **primary action button first** in the markup, then secondary/cancel (e.g. Save → Cancel). `DialogFooter` uses `flex-col` on mobile (primary on top, cancel at the bottom) and `sm:flex-row sm:justify-start` on desktop, so the first child is the leftmost action on larger screens.

app/Exceptions/Social/IncompleteMetaGraphPaginationException.php

@@ -8,14 +8,15 @@
 use Throwable;
 
 /**
- * Thrown when a Meta Graph edge could not be fully fetched — the first page
- * failed, a later page failed, or pagination stopped pathologically. Callers
- * must not treat this as an empty or complete list (e.g. "no pages" or
- * auto-connect when count === 1).
+ * A Meta Graph edge could not be fully fetched. Callers must not read this as an
+ * empty or complete list.
+ *
+ * `$transient` separates a throttle or an upstream hiccup, where the real list is
+ * unknown, from a confirmed rejection, where Meta has answered. Unknown by default.
  */
 class IncompleteMetaGraphPaginationException extends RuntimeException
 {
-    public function __construct(?Throwable $previous = null)
+    public function __construct(?Throwable $previous = null, public readonly bool $transient = true)
     {
         parent::__construct('Meta Graph pagination did not complete.', previous: $previous);
     }

app/Http/Controllers/Auth/FacebookController.php

@@ -9,21 +9,22 @@
 use App\Exceptions\SocialAccount\ConnectPopupException;
 use App\Exceptions\SocialAccount\NetworkAlreadyConnectedException;
 use App\Models\SocialAccount;
-use App\Services\Social\Meta\GraphPaginator;
+use App\Services\Social\Meta\ManagedPages;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Arr;
-use Illuminate\Support\Facades\Http;
 use Illuminate\Support\Facades\Log;
 use Illuminate\Support\Uri;
 use Inertia\Inertia;
 use Inertia\Response as InertiaResponse;
 use Laravel\Socialite\Facades\Socialite;
 use Symfony\Component\HttpFoundation\Response;
 
-class FacebookController extends SocialController
+class FacebookController extends MetaController
 {
-    protected string $driver = 'facebook';
+    protected string $pageFields = 'id,name,username,picture{url},access_token';
+
+    protected string $noPagesKey = 'accounts.popup_callback.no_facebook_pages';
 
     protected SocialPlatform $platform = SocialPlatform::Facebook;
 
@@ -33,6 +34,7 @@ class FacebookController extends SocialController
         'pages_read_engagement',
         'pages_manage_posts',
         'read_insights',
+        'business_management',
     ];
 
     public function connect(Request $request): Response
@@ -63,27 +65,29 @@ public function callback(Request $request): InertiaResponse|RedirectResponse
         try {
             $socialUser = Socialite::driver($this->driver)->usingGraphVersion($this->graphVersion())->user();
 
-            // Trigger public_profile and pages_show_list API calls
-            // These calls are needed for Meta app review permission verification
-            Http::get(config('trypost.platforms.facebook.graph_api').'/me', [
-                'fields' => 'id,name',
-                'access_token' => $socialUser->token,
-            ]);
+            $this->touchProfile($socialUser->token);
 
-            $pages = $this->fetchPages($socialUser->token);
+            $granted = $this->grantedScopes($socialUser->token);
+
+            if ($granted instanceof InertiaResponse) {
+                return $granted;
+            }
+
+            $walk = ManagedPages::forUser($this->graphApi(), $socialUser->token, $this->pageFields, $granted, $this->deadline());
+            $listed = $this->toPageCards($walk->pages);
+            $pages = ManagedPages::publishable($listed);
 
             if (empty($pages)) {
-                return $this->popupCallback(false, __('accounts.popup_callback.no_facebook_pages'), $this->platform->value);
+                return $this->noPagesOnOffer($walk, $listed);
             }
 
             $pages = $this->filterConnectableIdentities($workspace, $pages, 'id', $reconnect);
 
             if (empty($pages)) {
-                return $this->noConnectableIdentities($reconnect, 'page_not_found');
+                return $this->noConnectableIdentities($reconnect, 'page_not_found', $walk->complete);
             }
 
-            // If only one page, connect directly
-            if (count($pages) === 1) {
+            if (count($pages) === 1 && ($walk->complete || $reconnect !== null)) {
                 $page = $pages[0];
                 $avatarPath = uploadFromUrl(data_get($page, 'picture'));
 
@@ -98,7 +102,7 @@ public function callback(Request $request): InertiaResponse|RedirectResponse
                         'access_token' => data_get($page, 'access_token'),
                         'refresh_token' => null,
                         'token_expires_at' => null,
-                        'scopes' => $this->scopes,
+                        'scopes' => $granted,
                         'status' => Status::Connected,
                         'error_message' => null,
                         'disconnected_at' => null,
@@ -119,6 +123,7 @@ public function callback(Request $request): InertiaResponse|RedirectResponse
                 'facebook_oauth' => [
                     'user_token' => $socialUser->token,
                     'user_id' => $socialUser->getId(),
+                    'scopes' => $granted,
                     'pages' => $pages,
                     'reconnect_id' => $reconnect?->id,
                 ],
@@ -192,7 +197,7 @@ public function select(Request $request): InertiaResponse
                     'access_token' => data_get($selectedPage, 'access_token'),
                     'refresh_token' => null,
                     'token_expires_at' => null,
-                    'scopes' => $this->scopes,
+                    'scopes' => data_get($oauthData, 'scopes', $this->scopes),
                     'status' => Status::Connected,
                     'error_message' => null,
                     'disconnected_at' => null,
@@ -219,17 +224,12 @@ public function select(Request $request): InertiaResponse
         }
     }
 
-    private function fetchPages(string $userToken): array
+    /**
+     * @param  array<int, array<string, mixed>>  $pages
+     * @return list<array<string, mixed>>
+     */
+    private function toPageCards(array $pages): array
     {
-        $pages = GraphPaginator::all(
-            config('trypost.platforms.facebook.graph_api').'/me/accounts',
-            [
-                'access_token' => $userToken,
-                'fields' => 'id,name,username,picture{url},access_token',
-                'limit' => 100,
-            ],
-        );
-
         return collect($pages)->map(fn (array $page) => [
             'id' => data_get($page, 'id'),
             'name' => data_get($page, 'name'),
@@ -241,6 +241,6 @@ private function fetchPages(string $userToken): array
 
     private function graphVersion(): string
     {
-        return Uri::of(config('trypost.platforms.facebook.graph_api'))->path();
+        return Uri::of($this->graphApi())->path();
     }
 }