@erlancarreira/evolution-chat 0.1.0

package/next/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/next/index.ts","../src/errors.ts","../src/next/chat-routes.ts"],"sourcesContent":["// src/next/index.ts — superfície pública do subpath \"@erlancarreira/evolution-chat/next\".\n// Factories de rotas (Request/Response puros, compatíveis com o App Router do Next sem\n// importar \"next\"). Tipos auxiliares reexportados para o consumidor não descer a caminhos\n// internos (src/types, src/bridge/types).\n\nexport * from \"./chat-routes\";\nexport type { ChatConfig } from \"../types\";\nexport type { ChatLimiter, ChatLimiterResult } from \"../bridge/types\";\n","// src/errors.ts — erro de domínio canônico do SDK.\n//\n// ChatError carrega um `code` estável para mapear em HTTP nas rotas sem depender\n// de instanceof entre bundles (cada entry do tsup inline-iza a classe; usamos\n// `.code` para decidir o status). O erro de transporte da Evolution vive em\n// src/api/client.ts (EvolutionApiError), junto do cliente que o lança.\n\nexport type ChatErrorCode =\n  | \"invalid_input\"\n  | \"rate_limited\"\n  | \"group_create_failed\"\n  | \"send_failed\"\n  | \"session_not_found\"\n  | \"session_closed\"\n  | \"disabled\"\n  | \"unauthorized\"\n  | \"store_error\"\n  | \"webhook_invalid\";\n\nexport class ChatError extends Error {\n  public readonly code: ChatErrorCode;\n  public override readonly cause?: unknown;\n\n  constructor(message: string, code: ChatErrorCode, cause?: unknown) {\n    super(message);\n    this.name = \"ChatError\";\n    this.code = code;\n    this.cause = cause;\n  }\n}\n","// src/next/chat-routes.ts — factories de rotas para o App Router do Next, SEM importar \"next\".\n//\n// O plano proíbe dependência de \"next\"/\"next/server\": o App Router aceita os handlers\n// padrão Web `Request → Promise<Response>`, então as fábricas devolvem funções puras e o\n// arquivo de rota do consumidor apenas encaminha. Padrão de uso no LMS\n// (app/api/chat/route.ts):\n//\n//   import { createChatRoutes } from \"@erlancarreira/evolution-chat/next\";\n//   const handlers = createChatRoutes(deps);\n//   export const GET = (req: Request) => handlers.GET(req);\n//   export const POST = (req: Request) => handlers.POST(req);\n//\n// e em app/api/chat/webhook/route.ts:\n//\n//   import { createWebhookRoute } from \"@erlancarreira/evolution-chat/next\";\n//   const webhook = createWebhookRoute({ bridge, getConfig });\n//   export const POST = (req: Request) => webhook.POST(req);\n//\n// Mapeamento ChatError.code → HTTP (contrato da Task 8):\n//   invalid_input → 422 {error, field?}   rate_limited → 429 {error}\n//   session_not_found → 404               session_closed → 409\n//   group_create_failed / send_failed → 502 {error}\n//   store_error → 502                     inesperado → 500 (log server-side)\n//\n// O mapeamento lê o `code` por DUCK-TYPING, nunca por `instanceof ChatError`. Motivo:\n// o tsup emite uma cópia própria de `ChatError` em CADA bundle de entry (sem shared\n// chunks), então a classe que vive no bundle /bridge NÃO é a mesma do bundle /next —\n// um ChatError lançado pela bridge falha o `instanceof` na rota e degradava para 500.\n// Qualquer objeto `{ code, message }` (esta classe, outra cópia dela, ou um erro\n// serializado) produz o status correto. Ver statusForError().\n//\n// Segurança: as respostas NUNCA devolvem a sessão completa — só os campos que o widget\n// precisa (code/status/visitorName/realtimeToken). Telefone do visitante e groupJid não\n// saem do servidor. Webhook sempre responde 200: um 5xx faz a Evolution reenviar para\n// sempre; token errado é ignorado com `{ignored:true}` (registra log, não vaza motivo).\n\nimport { ChatError } from \"../errors\";\nimport type { ChatBridge } from \"../bridge\";\nimport type { ChatLimiter } from \"../bridge/types\";\nimport type { ChatConfig } from \"../types\";\n\nexport interface ChatRoutesDeps {\n  bridge: ChatBridge;\n  /** DI; default: permite tudo (o limite de sessões/IP de domínio vive no ChatBridge). */\n  limiter?: ChatLimiter;\n  /** DI (LMS: sha256(ip+salt)). Default: `() => null` → limiter nunca é acionado. */\n  getIpHash?: (req: Request) => string | null;\n  /** Resolvida (await) no início de cada request; o handler faz bridge.setConfig. */\n  getConfig: () => Promise<ChatConfig> | ChatConfig;\n}\n\nexport interface ChatRoutes {\n  GET: (req: Request) => Promise<Response>;\n  POST: (req: Request) => Promise<Response>;\n}\n\nexport interface WebhookRouteDeps {\n  bridge: ChatBridge;\n  getConfig: ChatRoutesDeps[\"getConfig\"];\n}\n\nexport interface WebhookRoute {\n  POST: (req: Request) => Promise<Response>;\n}\n\n// Guarda de transporte por IP (a de domínio — 5 sessões/10min — é do ChatBridge).\nconst POST_LIMIT = 30;\nconst POST_WINDOW_MS = 60 * 1000;\n\nfunction json(status: number, body: Record<string, unknown>): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json; charset=utf-8\" },\n  });\n}\n\nfunction asText(value: unknown): string {\n  return typeof value === \"string\" ? value : \"\";\n}\n\nfunction isFilled(value: unknown): boolean {\n  return typeof value === \"string\" && value.trim().length > 0;\n}\n\nasync function readJsonBody(req: Request): Promise<Record<string, unknown>> {\n  let parsed: unknown;\n  try {\n    parsed = await req.json();\n  } catch {\n    throw new ChatError(\"JSON inválido\", \"invalid_input\");\n  }\n  if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new ChatError(\"O corpo da requisição deve ser um objeto JSON\", \"invalid_input\");\n  }\n  return parsed as Record<string, unknown>;\n}\n\n// O bridge nomeia o campo na mensagem (\"Nome deve ter…\", \"Telefone inválido\"); a rota\n// traduz para o nome do campo do corpo (name/phone/message) para o widget destacar.\nconst FIELD_BY_LABEL: Record<string, string> = { Nome: \"name\", Mensagem: \"message\" };\n\nfunction fieldFromMessage(message: string): string | null {\n  if (message.startsWith(\"Telefone\")) return \"phone\";\n  const label = /^(\\w+) deve ter\\b/.exec(message)?.[1];\n  return label === undefined ? null : FIELD_BY_LABEL[label] ?? null;\n}\n\ninterface StatusForError {\n  status: number;\n  error: string;\n  field?: string;\n}\n\n// DUCK-TYPE (ver cabeçalho do arquivo): o `code` é lido por propriedade, nunca por\n// `instanceof ChatError` — a classe é duplicada nos bundles do tsup e a comparação de\n// identidade falharia entre /bridge e /next. Erro sem `code` reconhecível → 500.\nfunction statusForError(err: unknown): StatusForError {\n  const code =\n    typeof err === \"object\" && err !== null && \"code\" in err\n      ? (err as { code?: unknown }).code\n      : undefined;\n  const message =\n    typeof err === \"object\" && err !== null && typeof (err as { message?: unknown }).message === \"string\"\n      ? (err as { message: string }).message\n      : \"\";\n  // Objeto duck-typed sem `message` (erro serializado, plain object) ainda responde com o\n  // próprio code no corpo — nunca uma string vazia que o widget não conseguiria exibir.\n  const text = message !== \"\" || typeof code !== \"string\" ? message : code;\n\n  switch (code) {\n    case \"invalid_input\": {\n      const field = fieldFromMessage(text);\n      return field === null\n        ? { status: 422, error: text }\n        : { status: 422, error: text, field };\n    }\n    case \"rate_limited\":\n      return { status: 429, error: text };\n    case \"session_not_found\":\n      return { status: 404, error: text };\n    case \"session_closed\":\n      return { status: 409, error: text };\n    case \"group_create_failed\":\n    case \"send_failed\":\n      return { status: 502, error: text };\n    case \"disabled\":\n      return { status: 404, error: \"not_found\" };\n    case \"unauthorized\":\n      return { status: 401, error: text };\n    case \"store_error\":\n      return { status: 502, error: text };\n    default:\n      return { status: 500, error: \"erro interno\" };\n  }\n}\n\nfunction errorResponse(error: unknown): Response {\n  const { status, error: message, field } = statusForError(error);\n  // 500 só sai do ramo default (nenhum code mapeado responde 500) → é sempre inesperado,\n  // e o detalhe fica apenas no log do servidor: o corpo nunca vaza a mensagem original.\n  if (status === 500) {\n    console.error(\"[evolution-chat] erro inesperado na rota:\", error);\n    return json(500, { error: message });\n  }\n  const body: Record<string, unknown> = { error: message };\n  if (field !== undefined) body[\"field\"] = field;\n  return json(status, body);\n}\n\nexport function createChatRoutes(deps: ChatRoutesDeps): ChatRoutes {\n  const { bridge } = deps;\n  const getIpHash = deps.getIpHash ?? (() => null);\n\n  // GET /api/chat?token=…&after=… — replay de histórico para o widget.\n  async function GET(req: Request): Promise<Response> {\n    try {\n      const url = new URL(req.url);\n      const token = url.searchParams.get(\"token\");\n      if (token === null || token === \"\") {\n        return json(400, { error: \"token é obrigatório\" });\n      }\n      bridge.setConfig(await deps.getConfig());\n      const after = url.searchParams.get(\"after\");\n      const { session, messages } = await bridge.history(token, after);\n      if (session === null) return json(404, { error: \"session_not_found\" });\n      return json(200, {\n        session: { code: session.code, status: session.status, visitorName: session.visitorName },\n        messages,\n      });\n    } catch (error) {\n      return errorResponse(error);\n    }\n  }\n\n  // POST /api/chat — sem token abre chat; com token envia mensagem na sessão.\n  async function POST(req: Request): Promise<Response> {\n    let body: Record<string, unknown>;\n    try {\n      body = await readJsonBody(req);\n    } catch (error) {\n      return errorResponse(error);\n    }\n    try {\n      const cfg = await deps.getConfig();\n      bridge.setConfig(cfg);\n\n      const token = asText(body[\"token\"]);\n      const ipHash = getIpHash(req);\n\n      if (token === \"\") {\n        // Feature oculta: 404 genérico, nada confirma que o chat existe desligado.\n        if (!cfg.enabled) return json(404, { error: \"not_found\" });\n        // Anti-bot silencioso: finge sucesso sem tocar em store/Evolution/limiter.\n        if (isFilled(body[\"honeypot\"])) {\n          return json(200, { session: { code: \"XXXX\", status: \"closed\" }, messages: [] });\n        }\n      }\n\n      if (deps.limiter !== undefined && ipHash !== null && ipHash !== \"\") {\n        const result = await deps.limiter(ipHash, POST_LIMIT, POST_WINDOW_MS);\n        if (!result.success) {\n          return json(429, { error: \"Muitas requisições. Tente novamente em alguns minutos.\" });\n        }\n      }\n\n      if (token !== \"\") {\n        const message = await bridge.sendVisitorMessage(token, asText(body[\"message\"]));\n        return json(200, { message });\n      }\n\n      const { session, messages } = await bridge.startChat({\n        name: asText(body[\"name\"]),\n        phone: asText(body[\"phone\"]),\n        message: asText(body[\"message\"]),\n        contact: typeof body[\"contact\"] === \"string\" ? body[\"contact\"] : null,\n        ipHash,\n        userAgent: req.headers.get(\"user-agent\") ?? null,\n        honeypot: typeof body[\"honeypot\"] === \"string\" ? body[\"honeypot\"] : null,\n      });\n      return json(200, {\n        session: {\n          code: session.code,\n          status: session.status,\n          realtimeToken: session.realtimeToken,\n          visitorName: session.visitorName,\n        },\n        messages,\n      });\n    } catch (error) {\n      return errorResponse(error);\n    }\n  }\n\n  return { GET, POST };\n}\n\nexport function createWebhookRoute(deps: WebhookRouteDeps): WebhookRoute {\n  const { bridge } = deps;\n\n  // POST /api/chat/webhook — entrada da Evolution. SEMPRE 200 (ver cabeçalho do arquivo).\n  async function POST(req: Request): Promise<Response> {\n    try {\n      const cfg = await deps.getConfig();\n      bridge.setConfig(cfg);\n\n      const url = new URL(req.url);\n      const token = url.searchParams.get(\"token\") ?? req.headers.get(\"x-webhook-token\") ?? \"\";\n      if (token === \"\" || token !== cfg.webhookToken) {\n        // Log server-side para auditoria; a resposta é neutra e não vaza o motivo.\n        console.warn(\"[evolution-chat] webhook rejeitado: token inválido ou ausente\");\n        return json(200, { ignored: true });\n      }\n\n      let payload: unknown;\n      try {\n        payload = await req.json();\n      } catch {\n        console.warn(\"[evolution-chat] webhook rejeitado: corpo não é JSON válido\");\n        return json(200, { ignored: true });\n      }\n\n      const { handled } = await bridge.handleWebhook(payload);\n      return json(200, { handled });\n    } catch (error) {\n      // getConfig pode falhar (store fora): ainda assim 200, senão a Evolution reenvia.\n      console.error(\"[evolution-chat] webhook falhou (respondendo 200):\", error);\n      return json(200, { ignored: true });\n    }\n  }\n\n  return { POST };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACmBO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnB;AAAA,EACS;AAAA,EAEzB,YAAY,SAAiB,MAAqB,OAAiB;AACjE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;;;ACqCA,IAAM,aAAa;AACnB,IAAM,iBAAiB,KAAK;AAE5B,SAAS,KAAK,QAAgB,MAAyC;AACrE,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,EAC/D,CAAC;AACH;AAEA,SAAS,OAAO,OAAwB;AACtC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,SAAS,OAAyB;AACzC,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAC5D;AAEA,eAAe,aAAa,KAAgD;AAC1E,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,IAAI,KAAK;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,UAAU,oBAAiB,eAAe;AAAA,EACtD;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,UAAM,IAAI,UAAU,uDAAiD,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAIA,IAAM,iBAAyC,EAAE,MAAM,QAAQ,UAAU,UAAU;AAEnF,SAAS,iBAAiB,SAAgC;AACxD,MAAI,QAAQ,WAAW,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,oBAAoB,KAAK,OAAO,IAAI,CAAC;AACnD,SAAO,UAAU,SAAY,OAAO,eAAe,KAAK,KAAK;AAC/D;AAWA,SAAS,eAAe,KAA8B;AACpD,QAAM,OACJ,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,MAChD,IAA2B,OAC5B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAQ,IAA8B,YAAY,WACxF,IAA4B,UAC7B;AAGN,QAAM,OAAO,YAAY,MAAM,OAAO,SAAS,WAAW,UAAU;AAEpE,UAAQ,MAAM;AAAA,IACZ,KAAK,iBAAiB;AACpB,YAAM,QAAQ,iBAAiB,IAAI;AACnC,aAAO,UAAU,OACb,EAAE,QAAQ,KAAK,OAAO,KAAK,IAC3B,EAAE,QAAQ,KAAK,OAAO,MAAM,MAAM;AAAA,IACxC;AAAA,IACA,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,YAAY;AAAA,IAC3C,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC,KAAK;AACH,aAAO,EAAE,QAAQ,KAAK,OAAO,KAAK;AAAA,IACpC;AACE,aAAO,EAAE,QAAQ,KAAK,OAAO,eAAe;AAAA,EAChD;AACF;AAEA,SAAS,cAAc,OAA0B;AAC/C,QAAM,EAAE,QAAQ,OAAO,SAAS,MAAM,IAAI,eAAe,KAAK;AAG9D,MAAI,WAAW,KAAK;AAClB,YAAQ,MAAM,6CAA6C,KAAK;AAChE,WAAO,KAAK,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,EACrC;AACA,QAAM,OAAgC,EAAE,OAAO,QAAQ;AACvD,MAAI,UAAU,OAAW,MAAK,OAAO,IAAI;AACzC,SAAO,KAAK,QAAQ,IAAI;AAC1B;AAEO,SAAS,iBAAiB,MAAkC;AACjE,QAAM,EAAE,OAAO,IAAI;AACnB,QAAM,YAAY,KAAK,cAAc,MAAM;AAG3C,iBAAe,IAAI,KAAiC;AAClD,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,YAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,UAAI,UAAU,QAAQ,UAAU,IAAI;AAClC,eAAO,KAAK,KAAK,EAAE,OAAO,4BAAsB,CAAC;AAAA,MACnD;AACA,aAAO,UAAU,MAAM,KAAK,UAAU,CAAC;AACvC,YAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,YAAM,EAAE,SAAS,SAAS,IAAI,MAAM,OAAO,QAAQ,OAAO,KAAK;AAC/D,UAAI,YAAY,KAAM,QAAO,KAAK,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACrE,aAAO,KAAK,KAAK;AAAA,QACf,SAAS,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,aAAa,QAAQ,YAAY;AAAA,QACxF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAGA,iBAAe,KAAK,KAAiC;AACnD,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,aAAa,GAAG;AAAA,IAC/B,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AACA,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,UAAU;AACjC,aAAO,UAAU,GAAG;AAEpB,YAAM,QAAQ,OAAO,KAAK,OAAO,CAAC;AAClC,YAAM,SAAS,UAAU,GAAG;AAE5B,UAAI,UAAU,IAAI;AAEhB,YAAI,CAAC,IAAI,QAAS,QAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAEzD,YAAI,SAAS,KAAK,UAAU,CAAC,GAAG;AAC9B,iBAAO,KAAK,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,QAAQ,SAAS,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,QAChF;AAAA,MACF;AAEA,UAAI,KAAK,YAAY,UAAa,WAAW,QAAQ,WAAW,IAAI;AAClE,cAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,YAAY,cAAc;AACpE,YAAI,CAAC,OAAO,SAAS;AACnB,iBAAO,KAAK,KAAK,EAAE,OAAO,+DAAyD,CAAC;AAAA,QACtF;AAAA,MACF;AAEA,UAAI,UAAU,IAAI;AAChB,cAAM,UAAU,MAAM,OAAO,mBAAmB,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC;AAC9E,eAAO,KAAK,KAAK,EAAE,QAAQ,CAAC;AAAA,MAC9B;AAEA,YAAM,EAAE,SAAS,SAAS,IAAI,MAAM,OAAO,UAAU;AAAA,QACnD,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,QACzB,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,QAC3B,SAAS,OAAO,KAAK,SAAS,CAAC;AAAA,QAC/B,SAAS,OAAO,KAAK,SAAS,MAAM,WAAW,KAAK,SAAS,IAAI;AAAA,QACjE;AAAA,QACA,WAAW,IAAI,QAAQ,IAAI,YAAY,KAAK;AAAA,QAC5C,UAAU,OAAO,KAAK,UAAU,MAAM,WAAW,KAAK,UAAU,IAAI;AAAA,MACtE,CAAC;AACD,aAAO,KAAK,KAAK;AAAA,QACf,SAAS;AAAA,UACP,MAAM,QAAQ;AAAA,UACd,QAAQ,QAAQ;AAAA,UAChB,eAAe,QAAQ;AAAA,UACvB,aAAa,QAAQ;AAAA,QACvB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,KAAK;AACrB;AAEO,SAAS,mBAAmB,MAAsC;AACvE,QAAM,EAAE,OAAO,IAAI;AAGnB,iBAAe,KAAK,KAAiC;AACnD,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,UAAU;AACjC,aAAO,UAAU,GAAG;AAEpB,YAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,YAAM,QAAQ,IAAI,aAAa,IAAI,OAAO,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK;AACrF,UAAI,UAAU,MAAM,UAAU,IAAI,cAAc;AAE9C,gBAAQ,KAAK,kEAA+D;AAC5E,eAAO,KAAK,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MACpC;AAEA,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,IAAI,KAAK;AAAA,MAC3B,QAAQ;AACN,gBAAQ,KAAK,sEAA6D;AAC1E,eAAO,KAAK,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,MACpC;AAEA,YAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,cAAc,OAAO;AACtD,aAAO,KAAK,KAAK,EAAE,QAAQ,CAAC;AAAA,IAC9B,SAAS,OAAO;AAEd,cAAQ,MAAM,sDAAsD,KAAK;AACzE,aAAO,KAAK,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,IACpC;AAAA,EACF;AAEA,SAAO,EAAE,KAAK;AAChB;","names":[]}

package/next/index.d.cts

@@ -0,0 +1,205 @@
+type ChatMessageDirection = "visitor" | "owner";
+type ChatMessageStatus = "pending" | "sent" | "failed";
+type ChatSessionStatus = "active" | "closed" | "failed";
+/** Mensagem persistida (domínio). */
+interface ChatMessage {
+    id: string;
+    sessionId: string;
+    direction: ChatMessageDirection;
+    body: string;
+    status: ChatMessageStatus;
+    waMessageId: string | null;
+    createdAt: string;
+}
+/** Sessão de chat (um grupo do WhatsApp por visitante). */
+interface ChatSession {
+    id: string;
+    code: string;
+    realtimeToken: string;
+    visitorName: string;
+    visitorPhone: string;
+    visitorContact: string | null;
+    groupJid: string | null;
+    status: ChatSessionStatus;
+    createdAt: string;
+    lastMessageAt: string | null;
+}
+/**
+ * Configuração resolvida da plataforma. Montada pelo consumidor (LMS) a partir
+ * das settings e injetada no bridge via `setConfig`.
+ */
+interface ChatConfig {
+    enabled: boolean;
+    projectName: string;
+    platformNumber: string;
+    evolutionUrl: string;
+    instance: string;
+    apiKey: string;
+    welcome: string;
+    closeHours: number;
+    leaveOnClose: boolean;
+    webhookToken: string;
+}
+/** Evento de tempo real publicado no canal broadcast `chat:<realtimeToken>`. */
+type ChatEvent = {
+    type: "message";
+    message: ChatMessage;
+} | {
+    type: "session";
+    status: ChatSessionStatus;
+};
+
+/** Persistência de sessões/mensagens vista pela bridge. */
+interface SessionStore {
+    createSession(input: {
+        code: string;
+        realtimeToken: string;
+        visitorName: string;
+        visitorPhone: string;
+        visitorContact?: string | null;
+        groupJid: string | null;
+        /** Hash não-reversível do IP (LGPD): usado por countRecentSessionsByIpHash. */
+        ipHash?: string | null;
+        /** User-Agent bruto da requisição (auditoria/forense; nunca exibido). */
+        userAgent?: string | null;
+    }): Promise<ChatSession>;
+    getSessionByToken(token: string): Promise<ChatSession | null>;
+    getSessionByGroupJid(jid: string): Promise<ChatSession | null>;
+    appendMessage(input: {
+        sessionId: string;
+        direction: ChatMessageDirection;
+        body: string;
+        waMessageId?: string | null;
+        status?: ChatMessageStatus;
+    }): Promise<ChatMessage>;
+    /** Atualiza o status de uma mensagem já persistida (pending → sent/failed). */
+    updateMessageStatus(id: string, status: ChatMessageStatus): Promise<void>;
+    listMessages(sessionId: string, afterIso?: string | null): Promise<ChatMessage[]>;
+    /**
+     * Busca uma mensagem já persistida pelo `waMessageId` dentro da sessão (`null` se não
+     * existir). Suporta a idempotência de reentrega do webhook: a Evolution reenvia a
+     * mesma mensagem quando devolvemos `handled:false`, e o bridge precisa reconhecer o
+     * duplicado em vez de anexar/publicar de novo.
+     */
+    findMessageByWaId(sessionId: string, waMessageId: string): Promise<ChatMessage | null>;
+    /** Registra o waMessageId de uma mensagem enviada por ESTA instância (dedupe de eco). */
+    registerSentMessageId(sessionId: string, waMessageId: string): Promise<void>;
+    isEcho(sessionId: string, waMessageId: string): Promise<boolean>;
+    touchSession(sessionId: string, atIso: string): Promise<void>;
+    setGroupJid(sessionId: string, groupJid: string): Promise<void>;
+    markStatus(sessionId: string, status: ChatSessionStatus, reason?: string): Promise<void>;
+    countRecentSessionsByIpHash(ipHash: string, windowMs: number): Promise<number>;
+}
+/** Publicação server-side de eventos para o canal de uma sessão (fire-and-forget). */
+interface RealtimeTransport {
+    publish(realtimeToken: string, event: ChatEvent): Promise<void>;
+}
+/** Injeção de relógio (testes determinísticos). */
+type Clock = () => Date;
+interface ChatLimiterResult {
+    success: boolean;
+}
+/** Rate limiter (chave → janela). Implementações: memória, Redis, … */
+type ChatLimiter = (key: string, limit: number, windowMs: number) => ChatLimiterResult | Promise<ChatLimiterResult>;
+
+interface SendTextResult {
+    waMessageId: string;
+}
+interface CreateGroupResult {
+    groupJid: string;
+}
+interface EvolutionClient {
+    sendText(instance: string, number: string, text: string): Promise<SendTextResult>;
+    createGroup(instance: string, subject: string, participants: string[], description?: string): Promise<CreateGroupResult>;
+    leaveGroup(instance: string, groupJid: string): Promise<void>;
+    getConnectionState(instance: string): Promise<"open" | "connecting" | "close">;
+    connectQR(instance: string): Promise<{
+        qrBase64: string | null;
+        pairingCode: string | null;
+    }>;
+    setWebhook(instance: string, url: string, events: string[]): Promise<void>;
+}
+
+interface StartChatInput {
+    name: string;
+    phone: string;
+    message: string;
+    contact?: string | null;
+    ipHash?: string | null;
+    userAgent?: string | null;
+    honeypot?: string | null;
+}
+interface ChatBridgeDeps {
+    client: EvolutionClient;
+    store: SessionStore;
+    transport: RealtimeTransport;
+    /** Relógio injetável (testes determinísticos). Default: `() => new Date()`. */
+    clock?: Clock;
+}
+declare class ChatBridge {
+    private readonly deps;
+    private readonly router;
+    private readonly clock;
+    private config;
+    constructor(deps: ChatBridgeDeps);
+    /** Config injetada pelas rotas a cada request (setConfig → uso → getConfig). */
+    getConfig(): ChatConfig;
+    setConfig(cfg: ChatConfig): void;
+    /**
+     * Abre uma conversa: cria o grupo na Evolution, envia a primeira mensagem e persiste a
+     * sessão. Não publica no canal realtime — quem abriu o chat já tem a própria mensagem.
+     */
+    startChat(input: StartChatInput): Promise<{
+        session: ChatSession;
+        messages: ChatMessage[];
+    }>;
+    /** Relay site → grupo: persiste pending, envia, promove para sent (ou failed). */
+    sendVisitorMessage(token: string, text: string): Promise<ChatMessage>;
+    /**
+     * Entrada do webhook da Evolution. NUNCA lança: um 500 aqui faz a Evolution reenviar
+     * a mesma mensagem para sempre. Qualquer problema é logado e devolvido como não tratado.
+     */
+    handleWebhook(payload: unknown): Promise<{
+        handled: boolean;
+    }>;
+    /** Replay para o widget: sessão por token + mensagens (opcionalmente após um ISO). */
+    history(token: string, afterIso?: string | null): Promise<{
+        session: ChatSession | null;
+        messages: ChatMessage[];
+    }>;
+    /**
+     * createGroup com uma única retratação: um participante inválido (ex.: o número do
+     * visitante, vindo de um formulário web) não pode abortar o atendimento — a segunda
+     * tentativa cria o grupo só com a plataforma, o número que controlamos e é válido.
+     *
+     * Atenção (F1): createGroup NÃO é idempotente. Se a 1ª chamada criar o grupo e o erro
+     * observado for um timeout, a retratação pode orfanar um segundo grupo; a compensação
+     * (limpeza/reconciliação de órfãos) é preocupação das Tasks 7/8, não deste fix.
+     */
+    private createGroupWithRetry;
+}
+
+interface ChatRoutesDeps {
+    bridge: ChatBridge;
+    /** DI; default: permite tudo (o limite de sessões/IP de domínio vive no ChatBridge). */
+    limiter?: ChatLimiter;
+    /** DI (LMS: sha256(ip+salt)). Default: `() => null` → limiter nunca é acionado. */
+    getIpHash?: (req: Request) => string | null;
+    /** Resolvida (await) no início de cada request; o handler faz bridge.setConfig. */
+    getConfig: () => Promise<ChatConfig> | ChatConfig;
+}
+interface ChatRoutes {
+    GET: (req: Request) => Promise<Response>;
+    POST: (req: Request) => Promise<Response>;
+}
+interface WebhookRouteDeps {
+    bridge: ChatBridge;
+    getConfig: ChatRoutesDeps["getConfig"];
+}
+interface WebhookRoute {
+    POST: (req: Request) => Promise<Response>;
+}
+declare function createChatRoutes(deps: ChatRoutesDeps): ChatRoutes;
+declare function createWebhookRoute(deps: WebhookRouteDeps): WebhookRoute;
+
+export { type ChatConfig, type ChatLimiter, type ChatLimiterResult, type ChatRoutes, type ChatRoutesDeps, type WebhookRoute, type WebhookRouteDeps, createChatRoutes, createWebhookRoute };

package/next/index.d.ts

@@ -0,0 +1,205 @@
+type ChatMessageDirection = "visitor" | "owner";
+type ChatMessageStatus = "pending" | "sent" | "failed";
+type ChatSessionStatus = "active" | "closed" | "failed";
+/** Mensagem persistida (domínio). */
+interface ChatMessage {
+    id: string;
+    sessionId: string;
+    direction: ChatMessageDirection;
+    body: string;
+    status: ChatMessageStatus;
+    waMessageId: string | null;
+    createdAt: string;
+}
+/** Sessão de chat (um grupo do WhatsApp por visitante). */
+interface ChatSession {
+    id: string;
+    code: string;
+    realtimeToken: string;
+    visitorName: string;
+    visitorPhone: string;
+    visitorContact: string | null;
+    groupJid: string | null;
+    status: ChatSessionStatus;
+    createdAt: string;
+    lastMessageAt: string | null;
+}
+/**
+ * Configuração resolvida da plataforma. Montada pelo consumidor (LMS) a partir
+ * das settings e injetada no bridge via `setConfig`.
+ */
+interface ChatConfig {
+    enabled: boolean;
+    projectName: string;
+    platformNumber: string;
+    evolutionUrl: string;
+    instance: string;
+    apiKey: string;
+    welcome: string;
+    closeHours: number;
+    leaveOnClose: boolean;
+    webhookToken: string;
+}
+/** Evento de tempo real publicado no canal broadcast `chat:<realtimeToken>`. */
+type ChatEvent = {
+    type: "message";
+    message: ChatMessage;
+} | {
+    type: "session";
+    status: ChatSessionStatus;
+};
+
+/** Persistência de sessões/mensagens vista pela bridge. */
+interface SessionStore {
+    createSession(input: {
+        code: string;
+        realtimeToken: string;
+        visitorName: string;
+        visitorPhone: string;
+        visitorContact?: string | null;
+        groupJid: string | null;
+        /** Hash não-reversível do IP (LGPD): usado por countRecentSessionsByIpHash. */
+        ipHash?: string | null;
+        /** User-Agent bruto da requisição (auditoria/forense; nunca exibido). */
+        userAgent?: string | null;
+    }): Promise<ChatSession>;
+    getSessionByToken(token: string): Promise<ChatSession | null>;
+    getSessionByGroupJid(jid: string): Promise<ChatSession | null>;
+    appendMessage(input: {
+        sessionId: string;
+        direction: ChatMessageDirection;
+        body: string;
+        waMessageId?: string | null;
+        status?: ChatMessageStatus;
+    }): Promise<ChatMessage>;
+    /** Atualiza o status de uma mensagem já persistida (pending → sent/failed). */
+    updateMessageStatus(id: string, status: ChatMessageStatus): Promise<void>;
+    listMessages(sessionId: string, afterIso?: string | null): Promise<ChatMessage[]>;
+    /**
+     * Busca uma mensagem já persistida pelo `waMessageId` dentro da sessão (`null` se não
+     * existir). Suporta a idempotência de reentrega do webhook: a Evolution reenvia a
+     * mesma mensagem quando devolvemos `handled:false`, e o bridge precisa reconhecer o
+     * duplicado em vez de anexar/publicar de novo.
+     */
+    findMessageByWaId(sessionId: string, waMessageId: string): Promise<ChatMessage | null>;
+    /** Registra o waMessageId de uma mensagem enviada por ESTA instância (dedupe de eco). */
+    registerSentMessageId(sessionId: string, waMessageId: string): Promise<void>;
+    isEcho(sessionId: string, waMessageId: string): Promise<boolean>;
+    touchSession(sessionId: string, atIso: string): Promise<void>;
+    setGroupJid(sessionId: string, groupJid: string): Promise<void>;
+    markStatus(sessionId: string, status: ChatSessionStatus, reason?: string): Promise<void>;
+    countRecentSessionsByIpHash(ipHash: string, windowMs: number): Promise<number>;
+}
+/** Publicação server-side de eventos para o canal de uma sessão (fire-and-forget). */
+interface RealtimeTransport {
+    publish(realtimeToken: string, event: ChatEvent): Promise<void>;
+}
+/** Injeção de relógio (testes determinísticos). */
+type Clock = () => Date;
+interface ChatLimiterResult {
+    success: boolean;
+}
+/** Rate limiter (chave → janela). Implementações: memória, Redis, … */
+type ChatLimiter = (key: string, limit: number, windowMs: number) => ChatLimiterResult | Promise<ChatLimiterResult>;
+
+interface SendTextResult {
+    waMessageId: string;
+}
+interface CreateGroupResult {
+    groupJid: string;
+}
+interface EvolutionClient {
+    sendText(instance: string, number: string, text: string): Promise<SendTextResult>;
+    createGroup(instance: string, subject: string, participants: string[], description?: string): Promise<CreateGroupResult>;
+    leaveGroup(instance: string, groupJid: string): Promise<void>;
+    getConnectionState(instance: string): Promise<"open" | "connecting" | "close">;
+    connectQR(instance: string): Promise<{
+        qrBase64: string | null;
+        pairingCode: string | null;
+    }>;
+    setWebhook(instance: string, url: string, events: string[]): Promise<void>;
+}
+
+interface StartChatInput {
+    name: string;
+    phone: string;
+    message: string;
+    contact?: string | null;
+    ipHash?: string | null;
+    userAgent?: string | null;
+    honeypot?: string | null;
+}
+interface ChatBridgeDeps {
+    client: EvolutionClient;
+    store: SessionStore;
+    transport: RealtimeTransport;
+    /** Relógio injetável (testes determinísticos). Default: `() => new Date()`. */
+    clock?: Clock;
+}
+declare class ChatBridge {
+    private readonly deps;
+    private readonly router;
+    private readonly clock;
+    private config;
+    constructor(deps: ChatBridgeDeps);
+    /** Config injetada pelas rotas a cada request (setConfig → uso → getConfig). */
+    getConfig(): ChatConfig;
+    setConfig(cfg: ChatConfig): void;
+    /**
+     * Abre uma conversa: cria o grupo na Evolution, envia a primeira mensagem e persiste a
+     * sessão. Não publica no canal realtime — quem abriu o chat já tem a própria mensagem.
+     */
+    startChat(input: StartChatInput): Promise<{
+        session: ChatSession;
+        messages: ChatMessage[];
+    }>;
+    /** Relay site → grupo: persiste pending, envia, promove para sent (ou failed). */
+    sendVisitorMessage(token: string, text: string): Promise<ChatMessage>;
+    /**
+     * Entrada do webhook da Evolution. NUNCA lança: um 500 aqui faz a Evolution reenviar
+     * a mesma mensagem para sempre. Qualquer problema é logado e devolvido como não tratado.
+     */
+    handleWebhook(payload: unknown): Promise<{
+        handled: boolean;
+    }>;
+    /** Replay para o widget: sessão por token + mensagens (opcionalmente após um ISO). */
+    history(token: string, afterIso?: string | null): Promise<{
+        session: ChatSession | null;
+        messages: ChatMessage[];
+    }>;
+    /**
+     * createGroup com uma única retratação: um participante inválido (ex.: o número do
+     * visitante, vindo de um formulário web) não pode abortar o atendimento — a segunda
+     * tentativa cria o grupo só com a plataforma, o número que controlamos e é válido.
+     *
+     * Atenção (F1): createGroup NÃO é idempotente. Se a 1ª chamada criar o grupo e o erro
+     * observado for um timeout, a retratação pode orfanar um segundo grupo; a compensação
+     * (limpeza/reconciliação de órfãos) é preocupação das Tasks 7/8, não deste fix.
+     */
+    private createGroupWithRetry;
+}
+
+interface ChatRoutesDeps {
+    bridge: ChatBridge;
+    /** DI; default: permite tudo (o limite de sessões/IP de domínio vive no ChatBridge). */
+    limiter?: ChatLimiter;
+    /** DI (LMS: sha256(ip+salt)). Default: `() => null` → limiter nunca é acionado. */
+    getIpHash?: (req: Request) => string | null;
+    /** Resolvida (await) no início de cada request; o handler faz bridge.setConfig. */
+    getConfig: () => Promise<ChatConfig> | ChatConfig;
+}
+interface ChatRoutes {
+    GET: (req: Request) => Promise<Response>;
+    POST: (req: Request) => Promise<Response>;
+}
+interface WebhookRouteDeps {
+    bridge: ChatBridge;
+    getConfig: ChatRoutesDeps["getConfig"];
+}
+interface WebhookRoute {
+    POST: (req: Request) => Promise<Response>;
+}
+declare function createChatRoutes(deps: ChatRoutesDeps): ChatRoutes;
+declare function createWebhookRoute(deps: WebhookRouteDeps): WebhookRoute;
+
+export { type ChatConfig, type ChatLimiter, type ChatLimiterResult, type ChatRoutes, type ChatRoutesDeps, type WebhookRoute, type WebhookRouteDeps, createChatRoutes, createWebhookRoute };

package/next/index.js

@@ -0,0 +1,190 @@
+// src/errors.ts
+var ChatError = class extends Error {
+  code;
+  cause;
+  constructor(message, code, cause) {
+    super(message);
+    this.name = "ChatError";
+    this.code = code;
+    this.cause = cause;
+  }
+};
+
+// src/next/chat-routes.ts
+var POST_LIMIT = 30;
+var POST_WINDOW_MS = 60 * 1e3;
+function json(status, body) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json; charset=utf-8" }
+  });
+}
+function asText(value) {
+  return typeof value === "string" ? value : "";
+}
+function isFilled(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+async function readJsonBody(req) {
+  let parsed;
+  try {
+    parsed = await req.json();
+  } catch {
+    throw new ChatError("JSON inv\xE1lido", "invalid_input");
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new ChatError("O corpo da requisi\xE7\xE3o deve ser um objeto JSON", "invalid_input");
+  }
+  return parsed;
+}
+var FIELD_BY_LABEL = { Nome: "name", Mensagem: "message" };
+function fieldFromMessage(message) {
+  if (message.startsWith("Telefone")) return "phone";
+  const label = /^(\w+) deve ter\b/.exec(message)?.[1];
+  return label === void 0 ? null : FIELD_BY_LABEL[label] ?? null;
+}
+function statusForError(err) {
+  const code = typeof err === "object" && err !== null && "code" in err ? err.code : void 0;
+  const message = typeof err === "object" && err !== null && typeof err.message === "string" ? err.message : "";
+  const text = message !== "" || typeof code !== "string" ? message : code;
+  switch (code) {
+    case "invalid_input": {
+      const field = fieldFromMessage(text);
+      return field === null ? { status: 422, error: text } : { status: 422, error: text, field };
+    }
+    case "rate_limited":
+      return { status: 429, error: text };
+    case "session_not_found":
+      return { status: 404, error: text };
+    case "session_closed":
+      return { status: 409, error: text };
+    case "group_create_failed":
+    case "send_failed":
+      return { status: 502, error: text };
+    case "disabled":
+      return { status: 404, error: "not_found" };
+    case "unauthorized":
+      return { status: 401, error: text };
+    case "store_error":
+      return { status: 502, error: text };
+    default:
+      return { status: 500, error: "erro interno" };
+  }
+}
+function errorResponse(error) {
+  const { status, error: message, field } = statusForError(error);
+  if (status === 500) {
+    console.error("[evolution-chat] erro inesperado na rota:", error);
+    return json(500, { error: message });
+  }
+  const body = { error: message };
+  if (field !== void 0) body["field"] = field;
+  return json(status, body);
+}
+function createChatRoutes(deps) {
+  const { bridge } = deps;
+  const getIpHash = deps.getIpHash ?? (() => null);
+  async function GET(req) {
+    try {
+      const url = new URL(req.url);
+      const token = url.searchParams.get("token");
+      if (token === null || token === "") {
+        return json(400, { error: "token \xE9 obrigat\xF3rio" });
+      }
+      bridge.setConfig(await deps.getConfig());
+      const after = url.searchParams.get("after");
+      const { session, messages } = await bridge.history(token, after);
+      if (session === null) return json(404, { error: "session_not_found" });
+      return json(200, {
+        session: { code: session.code, status: session.status, visitorName: session.visitorName },
+        messages
+      });
+    } catch (error) {
+      return errorResponse(error);
+    }
+  }
+  async function POST(req) {
+    let body;
+    try {
+      body = await readJsonBody(req);
+    } catch (error) {
+      return errorResponse(error);
+    }
+    try {
+      const cfg = await deps.getConfig();
+      bridge.setConfig(cfg);
+      const token = asText(body["token"]);
+      const ipHash = getIpHash(req);
+      if (token === "") {
+        if (!cfg.enabled) return json(404, { error: "not_found" });
+        if (isFilled(body["honeypot"])) {
+          return json(200, { session: { code: "XXXX", status: "closed" }, messages: [] });
+        }
+      }
+      if (deps.limiter !== void 0 && ipHash !== null && ipHash !== "") {
+        const result = await deps.limiter(ipHash, POST_LIMIT, POST_WINDOW_MS);
+        if (!result.success) {
+          return json(429, { error: "Muitas requisi\xE7\xF5es. Tente novamente em alguns minutos." });
+        }
+      }
+      if (token !== "") {
+        const message = await bridge.sendVisitorMessage(token, asText(body["message"]));
+        return json(200, { message });
+      }
+      const { session, messages } = await bridge.startChat({
+        name: asText(body["name"]),
+        phone: asText(body["phone"]),
+        message: asText(body["message"]),
+        contact: typeof body["contact"] === "string" ? body["contact"] : null,
+        ipHash,
+        userAgent: req.headers.get("user-agent") ?? null,
+        honeypot: typeof body["honeypot"] === "string" ? body["honeypot"] : null
+      });
+      return json(200, {
+        session: {
+          code: session.code,
+          status: session.status,
+          realtimeToken: session.realtimeToken,
+          visitorName: session.visitorName
+        },
+        messages
+      });
+    } catch (error) {
+      return errorResponse(error);
+    }
+  }
+  return { GET, POST };
+}
+function createWebhookRoute(deps) {
+  const { bridge } = deps;
+  async function POST(req) {
+    try {
+      const cfg = await deps.getConfig();
+      bridge.setConfig(cfg);
+      const url = new URL(req.url);
+      const token = url.searchParams.get("token") ?? req.headers.get("x-webhook-token") ?? "";
+      if (token === "" || token !== cfg.webhookToken) {
+        console.warn("[evolution-chat] webhook rejeitado: token inv\xE1lido ou ausente");
+        return json(200, { ignored: true });
+      }
+      let payload;
+      try {
+        payload = await req.json();
+      } catch {
+        console.warn("[evolution-chat] webhook rejeitado: corpo n\xE3o \xE9 JSON v\xE1lido");
+        return json(200, { ignored: true });
+      }
+      const { handled } = await bridge.handleWebhook(payload);
+      return json(200, { handled });
+    } catch (error) {
+      console.error("[evolution-chat] webhook falhou (respondendo 200):", error);
+      return json(200, { ignored: true });
+    }
+  }
+  return { POST };
+}
+export {
+  createChatRoutes,
+  createWebhookRoute
+};
+//# sourceMappingURL=index.js.map