@adatechnology/meta-whatsapp-contracts 0.2.0-rc.2 → 0.2.0-rc.3

package/dist/testing/index.cjs

@@ -0,0 +1,143 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/testing/index.ts
+var testing_exports = {};
+__export(testing_exports, {
+  PREVIEW_AUDIO_MIME_TYPE: () => PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER: () => PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID: () => PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID: () => PREVIEW_WABA_ID,
+  buildInboundAudioPayload: () => buildInboundAudioPayload,
+  buildInboundInteractivePayload: () => buildInboundInteractivePayload,
+  buildInboundTextPayload: () => buildInboundTextPayload,
+  serializeWebhookPayload: () => serializeWebhookPayload
+});
+module.exports = __toCommonJS(testing_exports);
+
+// src/testing/inboundPayloads.ts
+var PREVIEW_PHONE_NUMBER_ID = "000000000000000";
+var PREVIEW_WABA_ID = "000000000000001";
+var PREVIEW_DISPLAY_PHONE_NUMBER = "+5511900000000";
+var PREVIEW_AUDIO_MIME_TYPE = "audio/ogg; codecs=opus";
+function generateWamid() {
+  const unique = globalThis.crypto.randomUUID().replaceAll("-", "");
+  return `wamid.${unique}`;
+}
+__name(generateWamid, "generateWamid");
+function currentTimestamp() {
+  return Math.floor(Date.now() / 1e3).toString();
+}
+__name(currentTimestamp, "currentTimestamp");
+function buildEnvelope(params) {
+  return {
+    object: "whatsapp_business_account",
+    entry: [
+      {
+        id: params.wabaId ?? PREVIEW_WABA_ID,
+        changes: [
+          {
+            value: {
+              messaging_product: "whatsapp",
+              metadata: {
+                display_phone_number: params.displayPhoneNumber ?? PREVIEW_DISPLAY_PHONE_NUMBER,
+                phone_number_id: params.phoneNumberId ?? PREVIEW_PHONE_NUMBER_ID
+              },
+              messages: [
+                params.message
+              ]
+            }
+          }
+        ]
+      }
+    ]
+  };
+}
+__name(buildEnvelope, "buildEnvelope");
+function buildInboundTextPayload(params) {
+  const { text, ...envelope } = params;
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "text",
+      text: {
+        body: text
+      },
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundTextPayload, "buildInboundTextPayload");
+function buildInboundInteractivePayload(params) {
+  const { buttonReply, listReply, ...envelope } = params;
+  const interactive = buttonReply ? {
+    type: "button_reply",
+    button_reply: buttonReply
+  } : {
+    type: "list_reply",
+    list_reply: listReply
+  };
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "interactive",
+      interactive,
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundInteractivePayload, "buildInboundInteractivePayload");
+function buildInboundAudioPayload(params) {
+  const { mediaId, mimeType, ...envelope } = params;
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "audio",
+      audio: {
+        id: mediaId,
+        mime_type: mimeType ?? PREVIEW_AUDIO_MIME_TYPE
+      },
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundAudioPayload, "buildInboundAudioPayload");
+function serializeWebhookPayload(payload) {
+  return JSON.stringify(payload);
+}
+__name(serializeWebhookPayload, "serializeWebhookPayload");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID,
+  buildInboundAudioPayload,
+  buildInboundInteractivePayload,
+  buildInboundTextPayload,
+  serializeWebhookPayload
+});
+//# sourceMappingURL=index.cjs.map

package/dist/testing/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/testing/index.ts","../../src/testing/inboundPayloads.ts"],"sourcesContent":["/**\n * Export separado (`@adatechnology/meta-whatsapp-contracts/testing`): utilitário de\n * desenvolvimento não entra no grafo de import de quem consome os contratos em produção.\n */\n\nexport {\n  buildInboundTextPayload,\n  buildInboundInteractivePayload,\n  buildInboundAudioPayload,\n  serializeWebhookPayload,\n  PREVIEW_PHONE_NUMBER_ID,\n  PREVIEW_WABA_ID,\n  PREVIEW_DISPLAY_PHONE_NUMBER,\n  PREVIEW_AUDIO_MIME_TYPE,\n} from './inboundPayloads'\n\nexport type {\n  BuildInboundTextPayloadParams,\n  BuildInboundInteractivePayloadParams,\n  BuildInboundAudioPayloadParams,\n  InteractiveReplyOption,\n} from './inboundPayloads'\n","/**\n * Builders de payload inbound para exercitar o webhook em desenvolvimento sem um app da Meta\n * credenciado. Moram aqui, e não no módulo, por uma razão de runtime: o preview do navegador\n * precisa montar payloads, e o módulo depende de `node:crypto` — importá-lo do frontend quebraria\n * o bundle. Este pacote só depende de zod, então roda nos dois lados.\n *\n * São construção de payload, não assinatura: assinar depende do runtime (`node:crypto` no\n * servidor, WebCrypto no navegador) e fica com quem tem o segredo.\n *\n * Por que `id` e `timestamp` são novos a cada chamada: o anti-replay do webhook usa o header de\n * assinatura como nonce, e a assinatura é derivada do corpo cru. Dois payloads idênticos geram a\n * mesma assinatura, e a segunda entrega é descartada como duplicata — numa conversa real (\"sim\"\n * duas vezes) isso apareceria como mensagem engolida, sem erro nenhum para investigar.\n */\n\nimport type { WhatsAppMessage, WhatsAppWebhookPayload } from '../webhook.types'\n\n// Valores de dev que espelham o formato dos reais (15 dígitos) sem apontar para nada da Meta.\nexport const PREVIEW_PHONE_NUMBER_ID = '000000000000000'\nexport const PREVIEW_WABA_ID = '000000000000001'\nexport const PREVIEW_DISPLAY_PHONE_NUMBER = '+5511900000000'\n\n// O que a Meta manda para áudio gravado no app; o pipeline de STT depende do mime para decodificar.\nexport const PREVIEW_AUDIO_MIME_TYPE = 'audio/ogg; codecs=opus'\n\ntype InboundEnvelopeParams = {\n  readonly from: string\n  readonly phoneNumberId?: string\n  readonly displayPhoneNumber?: string\n  readonly wabaId?: string\n}\n\n// `globalThis.crypto` em vez de `node:crypto`: é o que existe tanto no navegador quanto no Node\n// 19+/Bun, e é o que mantém estes builders utilizáveis pelo preview do navegador.\nfunction generateWamid(): string {\n  // Formato real é `wamid.<base64>`. O prefixo importa para quem faz parsing por prefixo; o corpo\n  // só precisa ser único por entrega, que é o que mantém a assinatura — e o nonce — distinta.\n  const unique = globalThis.crypto.randomUUID().replaceAll('-', '')\n  return `wamid.${unique}`\n}\n\nfunction currentTimestamp(): string {\n  return Math.floor(Date.now() / 1000).toString()\n}\n\ntype BuildEnvelopeParams = InboundEnvelopeParams & {\n  readonly message: WhatsAppMessage\n}\n\nfunction buildEnvelope(params: BuildEnvelopeParams): WhatsAppWebhookPayload {\n  return {\n    object: 'whatsapp_business_account',\n    entry: [\n      {\n        id: params.wabaId ?? PREVIEW_WABA_ID,\n        changes: [\n          {\n            value: {\n              messaging_product: 'whatsapp',\n              metadata: {\n                display_phone_number: params.displayPhoneNumber ?? PREVIEW_DISPLAY_PHONE_NUMBER,\n                phone_number_id: params.phoneNumberId ?? PREVIEW_PHONE_NUMBER_ID,\n              },\n              messages: [params.message],\n            },\n          },\n        ],\n      },\n    ],\n  }\n}\n\nexport type BuildInboundTextPayloadParams = InboundEnvelopeParams & {\n  readonly text: string\n}\n\nexport function buildInboundTextPayload(params: BuildInboundTextPayloadParams): WhatsAppWebhookPayload {\n  const { text, ...envelope } = params\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'text',\n      text: { body: text },\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\nexport type InteractiveReplyOption = {\n  readonly id: string\n  readonly title: string\n}\n\n// União exclusiva: uma resposta interativa é de botão OU de lista, nunca das duas nem de nenhuma.\n// O tipo torna o erro impossível em vez de validá-lo em runtime.\nexport type BuildInboundInteractivePayloadParams = InboundEnvelopeParams &\n  (\n    | { readonly buttonReply: InteractiveReplyOption; readonly listReply?: never }\n    | { readonly listReply: InteractiveReplyOption; readonly buttonReply?: never }\n  )\n\nexport function buildInboundInteractivePayload(params: BuildInboundInteractivePayloadParams): WhatsAppWebhookPayload {\n  const { buttonReply, listReply, ...envelope } = params\n\n  const interactive = buttonReply\n    ? { type: 'button_reply', button_reply: buttonReply }\n    : { type: 'list_reply', list_reply: listReply }\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'interactive',\n      interactive,\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\nexport type BuildInboundAudioPayloadParams = InboundEnvelopeParams & {\n  readonly mediaId: string\n  readonly mimeType?: string\n}\n\nexport function buildInboundAudioPayload(params: BuildInboundAudioPayloadParams): WhatsAppWebhookPayload {\n  const { mediaId, mimeType, ...envelope } = params\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'audio',\n      audio: { id: mediaId, mime_type: mimeType ?? PREVIEW_AUDIO_MIME_TYPE },\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\n/**\n * Serializa o payload uma única vez. A validação assina os bytes exatos recebidos: quem reserializa\n * antes de enviar (ou deixa o cliente HTTP serializar o objeto) muda espaçamento/ordem e derruba a\n * assinatura. Assinar e enviar SEMPRE a string devolvida aqui é o contrato.\n */\nexport function serializeWebhookPayload(payload: WhatsAppWebhookPayload): string {\n  return JSON.stringify(payload)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;ACkBO,IAAMA,0BAA0B;AAChC,IAAMC,kBAAkB;AACxB,IAAMC,+BAA+B;AAGrC,IAAMC,0BAA0B;AAWvC,SAASC,gBAAAA;AAGP,QAAMC,SAASC,WAAWC,OAAOC,WAAU,EAAGC,WAAW,KAAK,EAAA;AAC9D,SAAO,SAASJ,MAAAA;AAClB;AALSD;AAOT,SAASM,mBAAAA;AACP,SAAOC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,GAAA,EAAMC,SAAQ;AAC/C;AAFSL;AAQT,SAASM,cAAcC,QAA2B;AAChD,SAAO;IACLC,QAAQ;IACRC,OAAO;MACL;QACEC,IAAIH,OAAOI,UAAUpB;QACrBqB,SAAS;UACP;YACEC,OAAO;cACLC,mBAAmB;cACnBC,UAAU;gBACRC,sBAAsBT,OAAOU,sBAAsBzB;gBACnD0B,iBAAiBX,OAAOY,iBAAiB7B;cAC3C;cACA8B,UAAU;gBAACb,OAAOc;;YACpB;UACF;;MAEJ;;EAEJ;AACF;AArBSf;AA2BF,SAASgB,wBAAwBf,QAAqC;AAC3E,QAAM,EAAEgB,MAAM,GAAGC,SAAAA,IAAajB;AAE9B,SAAOD,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNH,MAAM;QAAEI,MAAMJ;MAAK;MACnBK,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAbgBsB;AA4BT,SAASO,+BAA+BtB,QAA4C;AACzF,QAAM,EAAEuB,aAAaC,WAAW,GAAGP,SAAAA,IAAajB;AAEhD,QAAMyB,cAAcF,cAChB;IAAEJ,MAAM;IAAgBO,cAAcH;EAAY,IAClD;IAAEJ,MAAM;IAAcQ,YAAYH;EAAU;AAEhD,SAAOzB,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNM;MACAJ,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAjBgB6B;AAwBT,SAASM,yBAAyB5B,QAAsC;AAC7E,QAAM,EAAE6B,SAASC,UAAU,GAAGb,SAAAA,IAAajB;AAE3C,SAAOD,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNY,OAAO;QAAE5B,IAAI0B;QAASG,WAAWF,YAAY5C;MAAwB;MACrEmC,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAbgBmC;AAoBT,SAASK,wBAAwBC,SAA+B;AACrE,SAAOC,KAAKC,UAAUF,OAAAA;AACxB;AAFgBD;","names":["PREVIEW_PHONE_NUMBER_ID","PREVIEW_WABA_ID","PREVIEW_DISPLAY_PHONE_NUMBER","PREVIEW_AUDIO_MIME_TYPE","generateWamid","unique","globalThis","crypto","randomUUID","replaceAll","currentTimestamp","Math","floor","Date","now","toString","buildEnvelope","params","object","entry","id","wabaId","changes","value","messaging_product","metadata","display_phone_number","displayPhoneNumber","phone_number_id","phoneNumberId","messages","message","buildInboundTextPayload","text","envelope","from","type","body","timestamp","buildInboundInteractivePayload","buttonReply","listReply","interactive","button_reply","list_reply","buildInboundAudioPayload","mediaId","mimeType","audio","mime_type","serializeWebhookPayload","payload","JSON","stringify"]}

package/dist/testing/index.d.cts

@@ -0,0 +1,57 @@
+import { g as WhatsAppWebhookPayload } from '../webhook.types-PxhpmpzC.cjs';
+import 'zod';
+
+/**
+ * Builders de payload inbound para exercitar o webhook em desenvolvimento sem um app da Meta
+ * credenciado. Moram aqui, e não no módulo, por uma razão de runtime: o preview do navegador
+ * precisa montar payloads, e o módulo depende de `node:crypto` — importá-lo do frontend quebraria
+ * o bundle. Este pacote só depende de zod, então roda nos dois lados.
+ *
+ * São construção de payload, não assinatura: assinar depende do runtime (`node:crypto` no
+ * servidor, WebCrypto no navegador) e fica com quem tem o segredo.
+ *
+ * Por que `id` e `timestamp` são novos a cada chamada: o anti-replay do webhook usa o header de
+ * assinatura como nonce, e a assinatura é derivada do corpo cru. Dois payloads idênticos geram a
+ * mesma assinatura, e a segunda entrega é descartada como duplicata — numa conversa real ("sim"
+ * duas vezes) isso apareceria como mensagem engolida, sem erro nenhum para investigar.
+ */
+
+declare const PREVIEW_PHONE_NUMBER_ID = "000000000000000";
+declare const PREVIEW_WABA_ID = "000000000000001";
+declare const PREVIEW_DISPLAY_PHONE_NUMBER = "+5511900000000";
+declare const PREVIEW_AUDIO_MIME_TYPE = "audio/ogg; codecs=opus";
+type InboundEnvelopeParams = {
+    readonly from: string;
+    readonly phoneNumberId?: string;
+    readonly displayPhoneNumber?: string;
+    readonly wabaId?: string;
+};
+type BuildInboundTextPayloadParams = InboundEnvelopeParams & {
+    readonly text: string;
+};
+declare function buildInboundTextPayload(params: BuildInboundTextPayloadParams): WhatsAppWebhookPayload;
+type InteractiveReplyOption = {
+    readonly id: string;
+    readonly title: string;
+};
+type BuildInboundInteractivePayloadParams = InboundEnvelopeParams & ({
+    readonly buttonReply: InteractiveReplyOption;
+    readonly listReply?: never;
+} | {
+    readonly listReply: InteractiveReplyOption;
+    readonly buttonReply?: never;
+});
+declare function buildInboundInteractivePayload(params: BuildInboundInteractivePayloadParams): WhatsAppWebhookPayload;
+type BuildInboundAudioPayloadParams = InboundEnvelopeParams & {
+    readonly mediaId: string;
+    readonly mimeType?: string;
+};
+declare function buildInboundAudioPayload(params: BuildInboundAudioPayloadParams): WhatsAppWebhookPayload;
+/**
+ * Serializa o payload uma única vez. A validação assina os bytes exatos recebidos: quem reserializa
+ * antes de enviar (ou deixa o cliente HTTP serializar o objeto) muda espaçamento/ordem e derruba a
+ * assinatura. Assinar e enviar SEMPRE a string devolvida aqui é o contrato.
+ */
+declare function serializeWebhookPayload(payload: WhatsAppWebhookPayload): string;
+
+export { type BuildInboundAudioPayloadParams, type BuildInboundInteractivePayloadParams, type BuildInboundTextPayloadParams, type InteractiveReplyOption, PREVIEW_AUDIO_MIME_TYPE, PREVIEW_DISPLAY_PHONE_NUMBER, PREVIEW_PHONE_NUMBER_ID, PREVIEW_WABA_ID, buildInboundAudioPayload, buildInboundInteractivePayload, buildInboundTextPayload, serializeWebhookPayload };

package/dist/testing/index.d.ts

@@ -0,0 +1,57 @@
+import { g as WhatsAppWebhookPayload } from '../webhook.types-PxhpmpzC.js';
+import 'zod';
+
+/**
+ * Builders de payload inbound para exercitar o webhook em desenvolvimento sem um app da Meta
+ * credenciado. Moram aqui, e não no módulo, por uma razão de runtime: o preview do navegador
+ * precisa montar payloads, e o módulo depende de `node:crypto` — importá-lo do frontend quebraria
+ * o bundle. Este pacote só depende de zod, então roda nos dois lados.
+ *
+ * São construção de payload, não assinatura: assinar depende do runtime (`node:crypto` no
+ * servidor, WebCrypto no navegador) e fica com quem tem o segredo.
+ *
+ * Por que `id` e `timestamp` são novos a cada chamada: o anti-replay do webhook usa o header de
+ * assinatura como nonce, e a assinatura é derivada do corpo cru. Dois payloads idênticos geram a
+ * mesma assinatura, e a segunda entrega é descartada como duplicata — numa conversa real ("sim"
+ * duas vezes) isso apareceria como mensagem engolida, sem erro nenhum para investigar.
+ */
+
+declare const PREVIEW_PHONE_NUMBER_ID = "000000000000000";
+declare const PREVIEW_WABA_ID = "000000000000001";
+declare const PREVIEW_DISPLAY_PHONE_NUMBER = "+5511900000000";
+declare const PREVIEW_AUDIO_MIME_TYPE = "audio/ogg; codecs=opus";
+type InboundEnvelopeParams = {
+    readonly from: string;
+    readonly phoneNumberId?: string;
+    readonly displayPhoneNumber?: string;
+    readonly wabaId?: string;
+};
+type BuildInboundTextPayloadParams = InboundEnvelopeParams & {
+    readonly text: string;
+};
+declare function buildInboundTextPayload(params: BuildInboundTextPayloadParams): WhatsAppWebhookPayload;
+type InteractiveReplyOption = {
+    readonly id: string;
+    readonly title: string;
+};
+type BuildInboundInteractivePayloadParams = InboundEnvelopeParams & ({
+    readonly buttonReply: InteractiveReplyOption;
+    readonly listReply?: never;
+} | {
+    readonly listReply: InteractiveReplyOption;
+    readonly buttonReply?: never;
+});
+declare function buildInboundInteractivePayload(params: BuildInboundInteractivePayloadParams): WhatsAppWebhookPayload;
+type BuildInboundAudioPayloadParams = InboundEnvelopeParams & {
+    readonly mediaId: string;
+    readonly mimeType?: string;
+};
+declare function buildInboundAudioPayload(params: BuildInboundAudioPayloadParams): WhatsAppWebhookPayload;
+/**
+ * Serializa o payload uma única vez. A validação assina os bytes exatos recebidos: quem reserializa
+ * antes de enviar (ou deixa o cliente HTTP serializar o objeto) muda espaçamento/ordem e derruba a
+ * assinatura. Assinar e enviar SEMPRE a string devolvida aqui é o contrato.
+ */
+declare function serializeWebhookPayload(payload: WhatsAppWebhookPayload): string;
+
+export { type BuildInboundAudioPayloadParams, type BuildInboundInteractivePayloadParams, type BuildInboundTextPayloadParams, type InteractiveReplyOption, PREVIEW_AUDIO_MIME_TYPE, PREVIEW_DISPLAY_PHONE_NUMBER, PREVIEW_PHONE_NUMBER_ID, PREVIEW_WABA_ID, buildInboundAudioPayload, buildInboundInteractivePayload, buildInboundTextPayload, serializeWebhookPayload };

package/dist/testing/index.js

@@ -0,0 +1,111 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/testing/inboundPayloads.ts
+var PREVIEW_PHONE_NUMBER_ID = "000000000000000";
+var PREVIEW_WABA_ID = "000000000000001";
+var PREVIEW_DISPLAY_PHONE_NUMBER = "+5511900000000";
+var PREVIEW_AUDIO_MIME_TYPE = "audio/ogg; codecs=opus";
+function generateWamid() {
+  const unique = globalThis.crypto.randomUUID().replaceAll("-", "");
+  return `wamid.${unique}`;
+}
+__name(generateWamid, "generateWamid");
+function currentTimestamp() {
+  return Math.floor(Date.now() / 1e3).toString();
+}
+__name(currentTimestamp, "currentTimestamp");
+function buildEnvelope(params) {
+  return {
+    object: "whatsapp_business_account",
+    entry: [
+      {
+        id: params.wabaId ?? PREVIEW_WABA_ID,
+        changes: [
+          {
+            value: {
+              messaging_product: "whatsapp",
+              metadata: {
+                display_phone_number: params.displayPhoneNumber ?? PREVIEW_DISPLAY_PHONE_NUMBER,
+                phone_number_id: params.phoneNumberId ?? PREVIEW_PHONE_NUMBER_ID
+              },
+              messages: [
+                params.message
+              ]
+            }
+          }
+        ]
+      }
+    ]
+  };
+}
+__name(buildEnvelope, "buildEnvelope");
+function buildInboundTextPayload(params) {
+  const { text, ...envelope } = params;
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "text",
+      text: {
+        body: text
+      },
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundTextPayload, "buildInboundTextPayload");
+function buildInboundInteractivePayload(params) {
+  const { buttonReply, listReply, ...envelope } = params;
+  const interactive = buttonReply ? {
+    type: "button_reply",
+    button_reply: buttonReply
+  } : {
+    type: "list_reply",
+    list_reply: listReply
+  };
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "interactive",
+      interactive,
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundInteractivePayload, "buildInboundInteractivePayload");
+function buildInboundAudioPayload(params) {
+  const { mediaId, mimeType, ...envelope } = params;
+  return buildEnvelope({
+    ...envelope,
+    message: {
+      id: generateWamid(),
+      from: params.from,
+      type: "audio",
+      audio: {
+        id: mediaId,
+        mime_type: mimeType ?? PREVIEW_AUDIO_MIME_TYPE
+      },
+      timestamp: currentTimestamp()
+    }
+  });
+}
+__name(buildInboundAudioPayload, "buildInboundAudioPayload");
+function serializeWebhookPayload(payload) {
+  return JSON.stringify(payload);
+}
+__name(serializeWebhookPayload, "serializeWebhookPayload");
+export {
+  PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID,
+  buildInboundAudioPayload,
+  buildInboundInteractivePayload,
+  buildInboundTextPayload,
+  serializeWebhookPayload
+};
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/testing/inboundPayloads.ts"],"sourcesContent":["/**\n * Builders de payload inbound para exercitar o webhook em desenvolvimento sem um app da Meta\n * credenciado. Moram aqui, e não no módulo, por uma razão de runtime: o preview do navegador\n * precisa montar payloads, e o módulo depende de `node:crypto` — importá-lo do frontend quebraria\n * o bundle. Este pacote só depende de zod, então roda nos dois lados.\n *\n * São construção de payload, não assinatura: assinar depende do runtime (`node:crypto` no\n * servidor, WebCrypto no navegador) e fica com quem tem o segredo.\n *\n * Por que `id` e `timestamp` são novos a cada chamada: o anti-replay do webhook usa o header de\n * assinatura como nonce, e a assinatura é derivada do corpo cru. Dois payloads idênticos geram a\n * mesma assinatura, e a segunda entrega é descartada como duplicata — numa conversa real (\"sim\"\n * duas vezes) isso apareceria como mensagem engolida, sem erro nenhum para investigar.\n */\n\nimport type { WhatsAppMessage, WhatsAppWebhookPayload } from '../webhook.types'\n\n// Valores de dev que espelham o formato dos reais (15 dígitos) sem apontar para nada da Meta.\nexport const PREVIEW_PHONE_NUMBER_ID = '000000000000000'\nexport const PREVIEW_WABA_ID = '000000000000001'\nexport const PREVIEW_DISPLAY_PHONE_NUMBER = '+5511900000000'\n\n// O que a Meta manda para áudio gravado no app; o pipeline de STT depende do mime para decodificar.\nexport const PREVIEW_AUDIO_MIME_TYPE = 'audio/ogg; codecs=opus'\n\ntype InboundEnvelopeParams = {\n  readonly from: string\n  readonly phoneNumberId?: string\n  readonly displayPhoneNumber?: string\n  readonly wabaId?: string\n}\n\n// `globalThis.crypto` em vez de `node:crypto`: é o que existe tanto no navegador quanto no Node\n// 19+/Bun, e é o que mantém estes builders utilizáveis pelo preview do navegador.\nfunction generateWamid(): string {\n  // Formato real é `wamid.<base64>`. O prefixo importa para quem faz parsing por prefixo; o corpo\n  // só precisa ser único por entrega, que é o que mantém a assinatura — e o nonce — distinta.\n  const unique = globalThis.crypto.randomUUID().replaceAll('-', '')\n  return `wamid.${unique}`\n}\n\nfunction currentTimestamp(): string {\n  return Math.floor(Date.now() / 1000).toString()\n}\n\ntype BuildEnvelopeParams = InboundEnvelopeParams & {\n  readonly message: WhatsAppMessage\n}\n\nfunction buildEnvelope(params: BuildEnvelopeParams): WhatsAppWebhookPayload {\n  return {\n    object: 'whatsapp_business_account',\n    entry: [\n      {\n        id: params.wabaId ?? PREVIEW_WABA_ID,\n        changes: [\n          {\n            value: {\n              messaging_product: 'whatsapp',\n              metadata: {\n                display_phone_number: params.displayPhoneNumber ?? PREVIEW_DISPLAY_PHONE_NUMBER,\n                phone_number_id: params.phoneNumberId ?? PREVIEW_PHONE_NUMBER_ID,\n              },\n              messages: [params.message],\n            },\n          },\n        ],\n      },\n    ],\n  }\n}\n\nexport type BuildInboundTextPayloadParams = InboundEnvelopeParams & {\n  readonly text: string\n}\n\nexport function buildInboundTextPayload(params: BuildInboundTextPayloadParams): WhatsAppWebhookPayload {\n  const { text, ...envelope } = params\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'text',\n      text: { body: text },\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\nexport type InteractiveReplyOption = {\n  readonly id: string\n  readonly title: string\n}\n\n// União exclusiva: uma resposta interativa é de botão OU de lista, nunca das duas nem de nenhuma.\n// O tipo torna o erro impossível em vez de validá-lo em runtime.\nexport type BuildInboundInteractivePayloadParams = InboundEnvelopeParams &\n  (\n    | { readonly buttonReply: InteractiveReplyOption; readonly listReply?: never }\n    | { readonly listReply: InteractiveReplyOption; readonly buttonReply?: never }\n  )\n\nexport function buildInboundInteractivePayload(params: BuildInboundInteractivePayloadParams): WhatsAppWebhookPayload {\n  const { buttonReply, listReply, ...envelope } = params\n\n  const interactive = buttonReply\n    ? { type: 'button_reply', button_reply: buttonReply }\n    : { type: 'list_reply', list_reply: listReply }\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'interactive',\n      interactive,\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\nexport type BuildInboundAudioPayloadParams = InboundEnvelopeParams & {\n  readonly mediaId: string\n  readonly mimeType?: string\n}\n\nexport function buildInboundAudioPayload(params: BuildInboundAudioPayloadParams): WhatsAppWebhookPayload {\n  const { mediaId, mimeType, ...envelope } = params\n\n  return buildEnvelope({\n    ...envelope,\n    message: {\n      id: generateWamid(),\n      from: params.from,\n      type: 'audio',\n      audio: { id: mediaId, mime_type: mimeType ?? PREVIEW_AUDIO_MIME_TYPE },\n      timestamp: currentTimestamp(),\n    },\n  })\n}\n\n/**\n * Serializa o payload uma única vez. A validação assina os bytes exatos recebidos: quem reserializa\n * antes de enviar (ou deixa o cliente HTTP serializar o objeto) muda espaçamento/ordem e derruba a\n * assinatura. Assinar e enviar SEMPRE a string devolvida aqui é o contrato.\n */\nexport function serializeWebhookPayload(payload: WhatsAppWebhookPayload): string {\n  return JSON.stringify(payload)\n}\n"],"mappings":";;;;AAkBO,IAAMA,0BAA0B;AAChC,IAAMC,kBAAkB;AACxB,IAAMC,+BAA+B;AAGrC,IAAMC,0BAA0B;AAWvC,SAASC,gBAAAA;AAGP,QAAMC,SAASC,WAAWC,OAAOC,WAAU,EAAGC,WAAW,KAAK,EAAA;AAC9D,SAAO,SAASJ,MAAAA;AAClB;AALSD;AAOT,SAASM,mBAAAA;AACP,SAAOC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,GAAA,EAAMC,SAAQ;AAC/C;AAFSL;AAQT,SAASM,cAAcC,QAA2B;AAChD,SAAO;IACLC,QAAQ;IACRC,OAAO;MACL;QACEC,IAAIH,OAAOI,UAAUpB;QACrBqB,SAAS;UACP;YACEC,OAAO;cACLC,mBAAmB;cACnBC,UAAU;gBACRC,sBAAsBT,OAAOU,sBAAsBzB;gBACnD0B,iBAAiBX,OAAOY,iBAAiB7B;cAC3C;cACA8B,UAAU;gBAACb,OAAOc;;YACpB;UACF;;MAEJ;;EAEJ;AACF;AArBSf;AA2BF,SAASgB,wBAAwBf,QAAqC;AAC3E,QAAM,EAAEgB,MAAM,GAAGC,SAAAA,IAAajB;AAE9B,SAAOD,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNH,MAAM;QAAEI,MAAMJ;MAAK;MACnBK,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAbgBsB;AA4BT,SAASO,+BAA+BtB,QAA4C;AACzF,QAAM,EAAEuB,aAAaC,WAAW,GAAGP,SAAAA,IAAajB;AAEhD,QAAMyB,cAAcF,cAChB;IAAEJ,MAAM;IAAgBO,cAAcH;EAAY,IAClD;IAAEJ,MAAM;IAAcQ,YAAYH;EAAU;AAEhD,SAAOzB,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNM;MACAJ,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAjBgB6B;AAwBT,SAASM,yBAAyB5B,QAAsC;AAC7E,QAAM,EAAE6B,SAASC,UAAU,GAAGb,SAAAA,IAAajB;AAE3C,SAAOD,cAAc;IACnB,GAAGkB;IACHH,SAAS;MACPX,IAAIhB,cAAAA;MACJ+B,MAAMlB,OAAOkB;MACbC,MAAM;MACNY,OAAO;QAAE5B,IAAI0B;QAASG,WAAWF,YAAY5C;MAAwB;MACrEmC,WAAW5B,iBAAAA;IACb;EACF,CAAA;AACF;AAbgBmC;AAoBT,SAASK,wBAAwBC,SAA+B;AACrE,SAAOC,KAAKC,UAAUF,OAAAA;AACxB;AAFgBD;","names":["PREVIEW_PHONE_NUMBER_ID","PREVIEW_WABA_ID","PREVIEW_DISPLAY_PHONE_NUMBER","PREVIEW_AUDIO_MIME_TYPE","generateWamid","unique","globalThis","crypto","randomUUID","replaceAll","currentTimestamp","Math","floor","Date","now","toString","buildEnvelope","params","object","entry","id","wabaId","changes","value","messaging_product","metadata","display_phone_number","displayPhoneNumber","phone_number_id","phoneNumberId","messages","message","buildInboundTextPayload","text","envelope","from","type","body","timestamp","buildInboundInteractivePayload","buttonReply","listReply","interactive","button_reply","list_reply","buildInboundAudioPayload","mediaId","mimeType","audio","mime_type","serializeWebhookPayload","payload","JSON","stringify"]}