جادو DM گائیڈ — میوز کا ماسٹر پرامپٹ | Urdu Ai | urduai.org
ہر [خانہ] اپنی معلومات سے بھریں، پھر نیچے کا پورا متن میوز میں چسپاں کریں۔
----------------------------------------------------------------
MY DETAILS
* My name / brand: [اپنا نام اور برانڈ — مثلاً: قیصر رونجھا / Urdu Ai]
* Facebook Page(s) to use: [اپنے فیس بک پیج کا نام یا لنک — مثلاً: Urdu Ai]
* Instagram account(s) to use: [اپنے انسٹاگرام اکاؤنٹ کا ہینڈل یا لنک — مثلاً: @urduaiorg]
* My website / link people should receive: [اپنی ویب سائٹ یا گائیڈ کا لنک — مثلاً: urduai.org]
* My keywords and what each one sends (one row per keyword):
  [پہلا لفظ — مثلاً: TEACHER] → [اس لفظ پر جانے والا لنک — مثلاً: اساتذہ کی گائیڈ کا لنک]
  [دوسرا لفظ — مثلاً: GEMINI] → [اس لفظ پر جانے والا لنک]
  (add as many as you want; people can ask for several in one comment and get them all in ONE message)
* Language of the gift messages: [پیغام کی زبان — مثلاً: اردو]
* Sign-off line on every gift: [ہر پیغام کی آخری سطر — مثلاً: ٹیم اردو اے آئی]
* Also link in every gift (optional): YouTube [اپنے یوٹیوب چینل کا لنک], WhatsApp Channel [اپنے واٹس ایپ چینل کا لنک]

THE JOB
Build me a free comment-to-DM system on my OWN Meta developer app — no ManyChat or any paid tool, no subscriptions. When someone comments one of my keywords on a chosen Facebook post or Instagram post/reel, they automatically receive a personal gift message (private reply/DM) with the link(s) they asked for, plus a short public thank-you reply under their comment (and a Page like on Facebook). Build me a dashboard artifact that shows every campaign, comments counted, DMs delivered, and response rate, synced automatically. Do the whole setup with me step by step; stop only where I must type a password, a 2FA code, or approve something.

GROUND RULES (never break these)
1. Tokens and passwords NEVER go through chat. Use Muse's Secure Vault capture links for every secret; I enter them there. Never print, log, or store a token in a file.
2. Nothing is sent to anyone until I approve the campaign. Approval is per campaign: one post + one keyword set + one gift template. Inside an approved campaign you may send without asking again; anything outside it needs my OK first.
3. Anti-spam discipline: keyword opt-in only; ONE private message per person EVER per campaign, even if they comment ten times; no follow-ups, no broadcasts; pace sends about 20–30 seconds apart; never try to work around a rate limit — stop and tell me instead.
4. A comment can only be privately replied to within 7 days on both platforms; after that, skip it.
5. Keep a dedupe log per campaign (JSON file) and treat it as the source of truth: never serve the same person twice, and if a run is interrupted, check the log before assuming anything was or wasn't sent.
6. Page through ALL comments on a post before telling me any queue or served numbers — never quote counts from a partial scan.
7. A message "logged as sent" is not proof it arrived. When delivery matters, verify it (test on my own account/phone and confirm I actually received it).
8. One sender per campaign: never run two jobs on the same post.

PHASE 1 — DISCOVERY
List my Facebook Pages and Instagram accounts you can see, with their numeric IDs and follower counts, and confirm with me which ones this system will use. Watch out for similarly named Pages — confirm the exact ID with me.

PHASE 2 — MY OWN META APP
Walk me through creating a Meta developer app (I'll do the clicks and 2FA; you tell me exactly where and wait for me): create/select my business portfolio, create an app named "[اپنا برانڈ — مثلاً: Urdu Ai] Engagement", use case "Manage messaging & content on Instagram". Add these permissions (Standard Access is enough for my own Pages and accounts — no App Review):
* Instagram: instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments
* Facebook: pages_show_list, pages_read_engagement, pages_manage_engagement, pages_read_user_content, pages_messaging, pages_manage_metadata, business_management

PHASE 3 — TOKENS (via Secure Vault only)
Set up a System User for the app with all the permissions above and a never-expiring token; save it in the vault. Derive Facebook Page tokens in-process from it at the start of each run — never store Page tokens. Save the Instagram app token in the vault too, note that it lasts ~60 days, and create a reminder to renew it 7 days before expiry.

PHASE 4 — THE GIFT ENGINE
For each campaign: match keywords case-insensitively in any language I use (collect ALL keyword matches in one comment and send all their links in ONE message). Gift structure: friendly greeting (use the commenter's first name on Facebook when available; on Instagram greetings are name-free — never invent a name), the link(s) they asked for with a one-line description each, my extra links (YouTube / WhatsApp Channel), and my sign-off.
* Facebook per person (3 touches): private reply + public thank-you reply + Page like.
* Instagram per person (2 touches): private reply + public reply. (Instagram's API has no like — never attempt one.)
* If a comment has NO keyword, send the index page (all links) plus one line listing the keywords for next time.
* Expected errors to log and skip, not stop on: Facebook 10903 (person's privacy blocks Page DMs), 2018300 (another app controls the thread), 10900 (already replied). Stop the whole run only on HTTP 429 or a token error, and tell me.

PHASE 5 — TEST, THEN MY APPROVAL
Serve exactly ONE real commenter on my first post, show me the sent message text and proof it landed, and wait for my OK. Only after I say go do you have blanket permission for that campaign (post + keywords + template).

PHASE 6 — WATCHERS
For every approved campaign, create a scheduled job that runs every 15 minutes: fetch all comments (paged), skip everyone in the dedupe log, serve newcomers (max 15 per run, paced). Runs with nothing new stay silent. Report to me only: each new serve on gift-style campaigns (one short line with the running total), cumulative milestones every 25 on keyword campaigns (25, 50, 75…), and any stop-error.

PHASE 7 — DASHBOARD ARTIFACT
Build me a dashboard artifact (call it "DM Jadoo" if you like) with: total comments, total DMs delivered, response rate, active campaigns; a card per campaign (platform, post link, keyword, comments, DMs); and a sync job every 15 minutes that refreshes the counts from the live posts and the sent logs. Self-serve rule: when I add a campaign in the dashboard (post link + keyword + gift link, status = active), serving starts automatically on the next sync — but campaigns that already have their own watcher must never be double-served.

PHASE 8 — WHATSAPP (only if I ask)
Connect my WhatsApp number through the Cloud API on the SAME Meta app (direct route, no BSP): register the number on my WhatsApp Business account, then build a small bot (Cloudflare Worker or similar free host) that replies to keywords with the same links, keeps a per-user log, and exposes a stats endpoint the dashboard reads (users served, messages, links delivered, plus a searchable people table: name, number, first/last seen, what they took). Keep the people table private to me — never on a shared or public view.
IMPORTANT — warn me before I commit: since 1 October 2026 Meta requires a payment method on the WhatsApp Business account and charges per delivered service message after the first 1,000 per number per month (check Meta's official rate card for the current Pakistan price). If I decline to add a payment method, DO NOT keep pitching it: leave WhatsApp sending off and route people to the free Facebook/Instagram DMs, my WhatsApp Channel, and my website instead.

PHASE 9 — KEEP IT RUNNING
Also set up: a daily follower tracker for my Pages/accounts (today's count, change since yesterday and since day one), and the token-renewal reminder from Phase 3. If any watcher starts failing repeatedly, tell me once with the cause — don't spam me every run.

DONE MEANS: my app exists with the permissions above; tokens live only in the vault; at least one campaign tested live with my approval and its watcher running; the dashboard shows real counts; and you've shown me a one-paragraph summary of what's live, what's blocked, and what only I can do next.
Start with Phase 1 now.