curl -X GET https://api.whaapy.com/user-webhooks \
  -H "Authorization: Bearer wha_TU_API_KEY"

{
  "data": [
    {
      "id": "wh-uuid",
      "name": "Mi Webhook",
      "url": "https://mi-servidor.com/webhooks",
      "events": ["message.received"],
      "isActive": true,
      "failureCount": 0,
      "createdAt": "2025-01-15T10:00:00Z"
    }
  ]
}

curl -X PATCH https://api.whaapy.com/user-webhooks/<id> \
  -H "Authorization: Bearer wha_TU_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "events": ["message.received", "message.sent"],
    "isActive": true
  }'

curl -X POST https://api.whaapy.com/user-webhooks/<id>/test \
  -H "Authorization: Bearer wha_TU_API_KEY"

{
  "success": true,
  "message": "Test webhook sent successfully",
  "data": {
    "status": 200,
    "duration_ms": 150,
    "response_preview": "{\"received\":true}"
  }
}

curl -X GET "https://api.whaapy.com/user-webhooks/<id>/logs?limit=50" \
  -H "Authorization: Bearer wha_TU_API_KEY"

{
  "data": [
    {
      "id": "log-uuid",
      "event": "message.received",
      "status": 200,
      "duration_ms": 120,
      "timestamp": "2025-01-15T10:30:00Z",
      "error": null
    },
    {
      "id": "log-uuid-2",
      "event": "message.sent",
      "status": 500,
      "duration_ms": 30000,
      "timestamp": "2025-01-15T10:31:00Z",
      "error": "Connection timeout"
    }
  ]
}

curl -X DELETE https://api.whaapy.com/user-webhooks/<id> \
  -H "Authorization: Bearer wha_TU_API_KEY"

curl -X PATCH https://api.whaapy.com/user-webhooks/<id> \
  -H "Authorization: Bearer wha_TU_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"isActive": true}'

const processedEvents = new Set();

app.post('/webhook', (req, res) => {
  const eventId = `${req.body.event}-${req.body.timestamp}`;
  
  if (processedEvents.has(eventId)) {
    return res.json({ received: true, duplicate: true });
  }
  
  processedEvents.add(eventId);
  // Procesar...
  
  res.json({ received: true });
});

app.post('/webhook', (req, res) => {
  console.log('Webhook received:', {
    event: req.body.event,
    timestamp: req.headers['x-webhook-timestamp'],
    id: req.headers['x-webhook-id'],
  });
  
  // Procesar...
});

const express = require('express');
const crypto = require('crypto');
const axios = require('axios');

const app = express();
app.use(express.json());

const WEBHOOK_SECRET = process.env.WHAAPY_WEBHOOK_SECRET;
const CRM_API = 'https://mi-crm.com/api';

function verifySignature(payload, signature) {
  const expected = crypto
    .createHmac('sha256', WEBHOOK_SECRET)
    .update(JSON.stringify(payload))
    .digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

app.post('/webhooks/whaapy', async (req, res) => {
  // 1. Verificar firma
  const signature = req.headers['x-webhook-signature'];
  if (!verifySignature(req.body, signature)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  // 2. Responder inmediatamente
  res.json({ received: true });

  // 3. Procesar según evento
  const { event, data } = req.body;

  try {
    switch (event) {
      case 'message.received':
        // Extraer texto del formato Meta
        const text = data.message?.text?.body || '[Media]';
        await axios.post(`${CRM_API}/activities`, {
          type: 'whatsapp_message',
          contact_phone: data.message.from,
          content: text,
          direction: 'inbound',
          whaapy_id: data.whaapy_message_id,
        });
        break;

      case 'contact.created':
        await axios.post(`${CRM_API}/contacts`, {
          phone: data.phone_number,
          name: data.name,
          source: 'whaapy',
        });
        break;

      case 'conversation.closed':
        await axios.patch(`${CRM_API}/deals`, {
          phone: data.phone_number,
          status: 'contacted',
        });
        break;
    }
  } catch (error) {
    console.error('Error procesando webhook:', error.message);
  }
});

app.listen(3000, () => {
  console.log('Webhook server running on port 3000');
});