@geekapps/post-fastify 0.1.10 → 0.1.12

package/dist/index.d.ts

@@ -28,7 +28,7 @@ type DomainStatus = "pending" | "verified" | "failed";
 type PlanTier = "free" | "starter" | "pro" | "enterprise";
 type WhatsappTemplateCategory = "MARKETING" | "UTILITY" | "AUTHENTICATION";
 type WhatsappTemplateStatus = "APPROVED" | "PENDING" | "REJECTED" | "DISABLED" | "PAUSED";
-type WebhookEvent = "message_sent" | "message_delivered" | "message_failed" | "message_bounced" | "message_opened" | "message_clicked";
+type WebhookEvent = "message_sent" | "message_delivered" | "message_failed" | "message_bounced" | "message_opened" | "message_clicked" | "message_received" | "call_connect" | "call_terminate" | "call_status" | "call_permission_reply";
 type WabaStatus = "active" | "token_expired" | "disconnected";
 type WhatsappNumberStatus = "pending_verification" | "active" | "inactive" | "failed";
 type ManagedNumberStatus = "provisioning" | "active" | "waiting_whatsapp_verification" | "whatsapp_active" | "suspended" | "canceled" | "failed";
@@ -203,7 +203,7 @@ interface AreaCode {
     available: boolean;
 }
 interface TemplateVariable {
-    name: string;
+    name?: string;
     value: string;
 }
 interface TemplateVariables {
@@ -370,6 +370,115 @@ interface WabaHealthResult {
 interface PhoneNumberStatusResult {
     status: unknown;
 }
+type CallingStatus = "ENABLED" | "DISABLED";
+interface CallingSettings {
+    status: CallingStatus;
+    callIconVisibility?: "DEFAULT" | "DISABLE_ALL" | null;
+    callbackPermissionStatus?: CallingStatus | null;
+}
+interface UpdateCallingSettingsInput {
+    status: CallingStatus;
+    callIconVisibility?: "DEFAULT" | "DISABLE_ALL";
+    callbackPermissionStatus?: CallingStatus;
+}
+/** Meta phone_number_id (as received in webhooks). Defaults to the org's first active number. */
+interface CallTargetInput {
+    phoneNumberId?: string;
+}
+interface CallAnswerInput extends CallTargetInput {
+    /** SDP answer to the offer received in `call_connect`. */
+    sdp: string;
+    bizOpaqueCallbackData?: string;
+}
+interface CallActionResult {
+    ok: true;
+    callId: string;
+    action: "pre_accept" | "accept" | "reject" | "terminate";
+}
+interface ConnectCallInput extends CallTargetInput {
+    to: string;
+    /** SDP offer. The answer arrives in the `call_connect` webhook. */
+    sdp: string;
+    bizOpaqueCallbackData?: string;
+}
+interface ConnectCallResult {
+    callId: string;
+    phoneNumberId: string;
+}
+interface RequestCallPermissionInput extends CallTargetInput {
+    to: string;
+    body?: string;
+}
+interface RequestCallPermissionResult {
+    messageId: string;
+    phoneNumberId: string;
+}
+/** Raw Meta response from GET /{phone-number-id}/call_permissions. */
+type CallPermissionStatus = Record<string, unknown>;
+interface WebhookSdpSession {
+    sdp_type: "offer" | "answer";
+    sdp: string;
+}
+interface CallWebhookBase {
+    phoneNumberId: string;
+    displayPhoneNumber: string | null;
+    callId: string;
+    timestamp: string;
+    bizOpaqueCallbackData: string | null;
+}
+interface CallConnectWebhookData extends CallWebhookBase {
+    from: string;
+    to: string;
+    contactName: string | null;
+    direction: "USER_INITIATED" | "BUSINESS_INITIATED" | null;
+    session: WebhookSdpSession | null;
+}
+interface CallTerminateWebhookData extends CallWebhookBase {
+    from: string;
+    to: string;
+    direction: "USER_INITIATED" | "BUSINESS_INITIATED" | null;
+    status: string | null;
+    startTime: string | null;
+    endTime: string | null;
+    duration: number | null;
+}
+interface CallStatusWebhookData extends CallWebhookBase {
+    status: string;
+    recipientId: string | null;
+}
+interface MessageReceivedWebhookData {
+    phoneNumberId: string;
+    displayPhoneNumber: string | null;
+    channel: "whatsapp";
+    messageId: string;
+    from: string;
+    contactName: string | null;
+    type: string;
+    timestamp: string;
+    /** Raw Meta message object. */
+    message: Record<string, unknown>;
+}
+type PostWebhookPayload = {
+    event: "call_connect";
+    data: CallConnectWebhookData;
+    timestamp: number;
+} | {
+    event: "call_terminate";
+    data: CallTerminateWebhookData;
+    timestamp: number;
+} | {
+    event: "call_status";
+    data: CallStatusWebhookData;
+    timestamp: number;
+} | {
+    event: "message_received" | "call_permission_reply";
+    data: MessageReceivedWebhookData;
+    timestamp: number;
+} | {
+    event: Exclude<WebhookEvent, "call_connect" | "call_terminate" | "call_status" | "message_received" | "call_permission_reply">;
+    data: Record<string, unknown>;
+    timestamp: number;
+};
 
 declare class DomainsResource {
     private readonly http;
@@ -474,6 +583,29 @@ declare class WebhooksResource {
     rotateSecret(id: string): Promise<RotateSecretResult>;
 }
 
+declare class WhatsappCallsResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Lê a configuração de chamadas de um número (id do WhatsappNumber no Post). */
+    getSettings(numberId: string): Promise<CallingSettings>;
+    /** Ativa/desativa chamadas no número. */
+    updateSettings(numberId: string, input: UpdateCallingSettingsInput): Promise<CallingSettings>;
+    /** Pré-aceita uma chamada recebida (opcional, acelera a conexão de mídia). */
+    preAccept(callId: string, input: CallAnswerInput): Promise<CallActionResult>;
+    /** Aceita uma chamada recebida enviando o SDP de resposta. */
+    accept(callId: string, input: CallAnswerInput): Promise<CallActionResult>;
+    /** Rejeita uma chamada recebida. */
+    reject(callId: string, input?: CallTargetInput): Promise<CallActionResult>;
+    /** Encerra uma chamada em andamento. */
+    terminate(callId: string, input?: CallTargetInput): Promise<CallActionResult>;
+    /** Inicia uma chamada (business-initiated). Exige permissão prévia do usuário. */
+    connect(input: ConnectCallInput): Promise<ConnectCallResult>;
+    /** Envia ao usuário o pedido de permissão para receber chamadas. */
+    requestPermission(input: RequestCallPermissionInput): Promise<RequestCallPermissionResult>;
+    /** Consulta o status de permissão de chamada de um usuário. */
+    getPermission(to: string, phoneNumberId?: string): Promise<CallPermissionStatus>;
+}
+
 declare class WhatsappNumbersResource {
     private readonly http;
     constructor(http: HttpClient);
@@ -511,6 +643,7 @@ declare class PostClient {
     readonly templates: TemplatesResource;
     readonly whatsappTemplates: WhatsappTemplatesResource;
     readonly whatsappNumbers: WhatsappNumbersResource;
+    readonly calls: WhatsappCallsResource;
     readonly domains: DomainsResource;
     readonly webhooks: WebhooksResource;
     readonly smtp: SmtpResource;
@@ -552,4 +685,12 @@ declare module "fastify" {
 }
 declare const _default: FastifyPluginAsync<PostPluginOptions>;
 
-export { type AreaCode, type AvailablePlan, type ConnectWabaInput, type ConnectWhatsappNumberInput, type CreateDomainInput, type CreateDomainResult, type CreateTemplateInput, type CreateWebhookInput, type CreateWhatsappTemplateInput, type DnsRecord, type DomainStatus, type DomainType, DomainsResource, HistoryResource, type ListHistoryParams, type ManagedNumber, type ManagedNumberStatus, ManagedNumbersResource, type MessageLog, type MessageLogDetail, type MessageStatus, type MessageTemplate, type MessageType, MessagesResource, type OrgDomain, type OrgPlan, type OrgUsage, type OrgWaba, type OrgWebhook, type OrgWebhookWithSecret, type PaginatedResult, type PhoneNumberStatusResult, type PlanTier, PlansResource, type PlansResult, PostApiError, PostClient, type PostPluginOptions, type RegisterWhatsappNumberInput, type RotateSecretResult, type SaveDraftInput, type SendMessageInput, type SendMessageResult, type SmtpConfig, SmtpResource, type StatisticsParams, StatisticsResource, type StatisticsResult, type SyncWhatsappTemplatesResult, type TemplateVariable, type TemplateVariables, TemplatesResource, type UpdatePlanInput, type UpdateTemplateInput, type UpdateWebhookInput, type UpdateWhatsappProfileInput, type UpdateWhatsappTemplateInput, type UpsertSmtpConfigInput, type WabaStatus, type WebhookDelivery, type WebhookEvent, WebhooksResource, type WhatsappNumber, type WhatsappNumberProfile, type WhatsappNumberStatus, WhatsappNumbersResource, type WhatsappTemplate, type WhatsappTemplateCategory, type WhatsappTemplateStatus, WhatsappTemplatesResource, _default as postPlugin };
+/**
+ * Verifies the `X-Post-Signature` header (`sha256=<hex>`) of a Post webhook.
+ * `rawBody` must be the exact request body string, before JSON parsing.
+ */
+declare function verifyWebhookSignature(rawBody: string, signatureHeader: string | null | undefined, secret: string): boolean;
+/** Verifies the signature and parses the payload; throws if invalid. */
+declare function constructWebhookEvent(rawBody: string, signatureHeader: string | null | undefined, secret: string): PostWebhookPayload;
+
+export { type AreaCode, type AvailablePlan, type CallActionResult, type CallAnswerInput, type CallConnectWebhookData, type CallPermissionStatus, type CallStatusWebhookData, type CallTargetInput, type CallTerminateWebhookData, type CallingSettings, type CallingStatus, type ConnectCallInput, type ConnectCallResult, type ConnectWabaInput, type ConnectWhatsappNumberInput, type CreateDomainInput, type CreateDomainResult, type CreateTemplateInput, type CreateWebhookInput, type CreateWhatsappTemplateInput, type DnsRecord, type DomainStatus, type DomainType, DomainsResource, HistoryResource, type ListHistoryParams, type ManagedNumber, type ManagedNumberStatus, ManagedNumbersResource, type MessageLog, type MessageLogDetail, type MessageReceivedWebhookData, type MessageStatus, type MessageTemplate, type MessageType, MessagesResource, type OrgDomain, type OrgPlan, type OrgUsage, type OrgWaba, type OrgWebhook, type OrgWebhookWithSecret, type PaginatedResult, type PhoneNumberStatusResult, type PlanTier, PlansResource, type PlansResult, PostApiError, PostClient, type PostPluginOptions, type PostWebhookPayload, type RegisterWhatsappNumberInput, type RequestCallPermissionInput, type RequestCallPermissionResult, type RotateSecretResult, type SaveDraftInput, type SendMessageInput, type SendMessageResult, type SmtpConfig, SmtpResource, type StatisticsParams, StatisticsResource, type StatisticsResult, type SyncWhatsappTemplatesResult, type TemplateVariable, type TemplateVariables, TemplatesResource, type UpdateCallingSettingsInput, type UpdatePlanInput, type UpdateTemplateInput, type UpdateWebhookInput, type UpdateWhatsappProfileInput, type UpdateWhatsappTemplateInput, type UpsertSmtpConfigInput, type WabaStatus, type WebhookDelivery, type WebhookEvent, type WebhookSdpSession, WebhooksResource, WhatsappCallsResource, type WhatsappNumber, type WhatsappNumberProfile, type WhatsappNumberStatus, WhatsappNumbersResource, type WhatsappTemplate, type WhatsappTemplateCategory, type WhatsappTemplateStatus, WhatsappTemplatesResource, constructWebhookEvent, _default as postPlugin, verifyWebhookSignature };

package/dist/index.js

@@ -264,6 +264,49 @@ var WebhooksResource = class {
   }
 };
 
+// src/resources/whatsapp-calls.ts
+var WhatsappCallsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** Lê a configuração de chamadas de um número (id do WhatsappNumber no Post). */
+  getSettings(numberId) {
+    return this.http.get(`/whatsapp/numbers/${numberId}/calling`);
+  }
+  /** Ativa/desativa chamadas no número. */
+  updateSettings(numberId, input) {
+    return this.http.put(`/whatsapp/numbers/${numberId}/calling`, input);
+  }
+  /** Pré-aceita uma chamada recebida (opcional, acelera a conexão de mídia). */
+  preAccept(callId, input) {
+    return this.http.post(`/whatsapp/calls/${callId}/pre-accept`, input);
+  }
+  /** Aceita uma chamada recebida enviando o SDP de resposta. */
+  accept(callId, input) {
+    return this.http.post(`/whatsapp/calls/${callId}/accept`, input);
+  }
+  /** Rejeita uma chamada recebida. */
+  reject(callId, input = {}) {
+    return this.http.post(`/whatsapp/calls/${callId}/reject`, input);
+  }
+  /** Encerra uma chamada em andamento. */
+  terminate(callId, input = {}) {
+    return this.http.post(`/whatsapp/calls/${callId}/terminate`, input);
+  }
+  /** Inicia uma chamada (business-initiated). Exige permissão prévia do usuário. */
+  connect(input) {
+    return this.http.post("/whatsapp/calls", input);
+  }
+  /** Envia ao usuário o pedido de permissão para receber chamadas. */
+  requestPermission(input) {
+    return this.http.post("/whatsapp/calls/permissions", input);
+  }
+  /** Consulta o status de permissão de chamada de um usuário. */
+  getPermission(to, phoneNumberId) {
+    return this.http.get(`/whatsapp/calls/permissions?${new URLSearchParams({ to, ...phoneNumberId ? { phoneNumberId } : {} })}`);
+  }
+};
+
 // src/resources/whatsapp-numbers.ts
 var WhatsappNumbersResource = class {
   constructor(http) {
@@ -351,6 +394,7 @@ var PostClient = class {
     this.templates = new TemplatesResource(this.http);
     this.whatsappTemplates = new WhatsappTemplatesResource(this.http);
     this.whatsappNumbers = new WhatsappNumbersResource(this.http);
+    this.calls = new WhatsappCallsResource(this.http);
     this.domains = new DomainsResource(this.http);
     this.webhooks = new WebhooksResource(this.http);
     this.smtp = new SmtpResource(this.http);
@@ -497,6 +541,21 @@ var plugin_default = fp(postPlugin, {
   fastify: ">=4.0.0",
   name: "@geekapps/post-fastify"
 });
+
+// src/webhook.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function verifyWebhookSignature(rawBody, signatureHeader, secret) {
+  if (!signatureHeader?.startsWith("sha256=")) return false;
+  const expected = Buffer.from(createHmac("sha256", secret).update(rawBody).digest("hex"));
+  const received = Buffer.from(signatureHeader.slice("sha256=".length));
+  return expected.length === received.length && timingSafeEqual(expected, received);
+}
+function constructWebhookEvent(rawBody, signatureHeader, secret) {
+  if (!verifyWebhookSignature(rawBody, signatureHeader, secret)) {
+    throw new Error("Invalid Post webhook signature");
+  }
+  return JSON.parse(rawBody);
+}
 export {
   DomainsResource,
   HistoryResource,
@@ -509,8 +568,11 @@ export {
   StatisticsResource,
   TemplatesResource,
   WebhooksResource,
+  WhatsappCallsResource,
   WhatsappNumbersResource,
   WhatsappTemplatesResource,
-  plugin_default as postPlugin
+  constructWebhookEvent,
+  plugin_default as postPlugin,
+  verifyWebhookSignature
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/resources/domains.ts","../src/resources/history.ts","../src/resources/managed-numbers.ts","../src/resources/messages.ts","../src/resources/plans.ts","../src/resources/smtp.ts","../src/resources/statistics.ts","../src/resources/templates.ts","../src/resources/webhooks.ts","../src/resources/whatsapp-numbers.ts","../src/resources/whatsapp-templates.ts","../src/client.ts","../src/plugin.ts"],"sourcesContent":["export class PostApiError extends Error {\n  constructor(\n    public readonly status: number,\n    message: string,\n    public readonly detail?: string,\n  ) {\n    super(detail ? `${message}: ${detail}` : message);\n    this.name = \"PostApiError\";\n  }\n\n  get isNotFound() {\n    return this.status === 404;\n  }\n\n  get isUnauthorized() {\n    return this.status === 401;\n  }\n\n  get isForbidden() {\n    return this.status === 403;\n  }\n\n  get isRateLimited() {\n    return this.status === 429;\n  }\n\n  get isValidationError() {\n    return this.status === 400;\n  }\n}\n","import { PostApiError } from \"./errors.js\";\r\n\r\nexport type TokenResolver = string | (() => string | Promise<string>);\r\n\r\nexport interface HttpClientOptions {\r\n  baseUrl: string;\r\n  token: TokenResolver;\r\n  organizationId?: string | (() => string | Promise<string>);\r\n}\r\n\r\nexport class HttpClient {\r\n  private readonly baseUrl: string;\r\n  private readonly token: TokenResolver;\r\n  private readonly organizationId?: string | (() => string | Promise<string>);\r\n\r\n  constructor(options: HttpClientOptions) {\r\n    this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\r\n    this.token = options.token;\r\n    this.organizationId = options.organizationId;\r\n  }\r\n\r\n  private async resolveToken(): Promise<string> {\r\n    return typeof this.token === \"function\" ? await this.token() : this.token;\r\n  }\r\n\r\n  private async resolveOrgId(): Promise<string | undefined> {\r\n    if (!this.organizationId) return undefined;\r\n    return typeof this.organizationId === \"function\"\r\n      ? await this.organizationId()\r\n      : this.organizationId;\r\n  }\r\n\r\n  async request<T = unknown>(\r\n    method: string,\r\n    path: string,\r\n    body?: unknown,\r\n  ): Promise<T> {\r\n    const token = await this.resolveToken();\r\n    const orgId = await this.resolveOrgId();\r\n\r\n    const res = await fetch(`${this.baseUrl}/v1${path}`, {\r\n      method,\r\n      headers: {\r\n        Authorization: `Bearer ${token}`,\r\n        ...(body !== undefined ? { \"Content-Type\": \"application/json\" } : {}),\r\n        ...(orgId ? { \"X-Organization-Id\": orgId } : {}),\r\n      },\r\n      ...(body !== undefined ? { body: JSON.stringify(body) } : {}),\r\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n      cache: \"no-store\" as any,\r\n    });\r\n\r\n    if (!res.ok) {\r\n      const err = await res.json().catch(() => ({})) as {\r\n        error?: string;\r\n        detail?: string;\r\n      };\r\n      throw new PostApiError(\r\n        res.status,\r\n        err.error ?? `HTTP ${res.status}`,\r\n        err.detail,\r\n      );\r\n    }\r\n\r\n    if (res.status === 204) return undefined as T;\r\n    return res.json() as Promise<T>;\r\n  }\r\n\r\n  get<T>(path: string) {\r\n    return this.request<T>(\"GET\", path);\r\n  }\r\n\r\n  post<T>(path: string, body?: unknown) {\r\n    return this.request<T>(\"POST\", path, body);\r\n  }\r\n\r\n  put<T>(path: string, body?: unknown) {\r\n    return this.request<T>(\"PUT\", path, body);\r\n  }\r\n\r\n  patch<T>(path: string, body?: unknown) {\r\n    return this.request<T>(\"PATCH\", path, body);\r\n  }\r\n\r\n  delete<T = void>(path: string) {\r\n    return this.request<T>(\"DELETE\", path);\r\n  }\r\n}\r\n","import type { HttpClient } from \"../http.js\";\nimport type { CreateDomainInput, CreateDomainResult, OrgDomain } from \"../types.js\";\n\nexport class DomainsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<OrgDomain[]> {\n    return this.http.get<OrgDomain[]>(\"/domains\");\n  }\n\n  get(id: string): Promise<OrgDomain> {\n    return this.http.get<OrgDomain>(`/domains/${id}`);\n  }\n\n  create(input: CreateDomainInput): Promise<CreateDomainResult> {\n    return this.http.post<CreateDomainResult>(\"/domains\", input);\n  }\n\n  verify(id: string): Promise<{ status: \"verified\" | \"failed\" }> {\n    return this.http.post<{ status: \"verified\" | \"failed\" }>(`/domains/${id}/verify`);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/domains/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { ListHistoryParams, MessageLog, MessageLogDetail, PaginatedResult } from \"../types.js\";\n\nexport class HistoryResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(params?: ListHistoryParams): Promise<PaginatedResult<MessageLog>> {\n    const qs = new URLSearchParams();\n    if (params?.type) qs.set(\"type\", params.type);\n    if (params?.status) qs.set(\"status\", params.status);\n    if (params?.from) qs.set(\"from\", params.from);\n    if (params?.to) qs.set(\"to\", params.to);\n    if (params?.page !== undefined) qs.set(\"page\", String(params.page));\n    if (params?.limit !== undefined) qs.set(\"limit\", String(params.limit));\n    const query = qs.toString();\n    return this.http.get<PaginatedResult<MessageLog>>(`/history${query ? `?${query}` : \"\"}`);\n  }\n\n  get(id: string): Promise<MessageLogDetail> {\n    return this.http.get<MessageLogDetail>(`/history/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { AreaCode, ManagedNumber } from \"../types.js\";\n\nexport interface ProvisionManagedNumberInput {\n  areaCode: number;\n  name?: string;\n  displayName: string;\n  otpMethod?: \"SMS\" | \"VOICE\";\n  otpLanguage?: string;\n  pin?: string;\n  orgWabaId?: string;\n  wabaId?: string;\n  accessToken?: string;\n}\n\nexport interface RetryVerificationInput {\n  otpMethod?: \"SMS\" | \"VOICE\";\n  otpLanguage?: string;\n}\n\nexport class ManagedNumbersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  listAreaCodes(): Promise<AreaCode[]> {\n    return this.http.get<AreaCode[]>(\"/managed-numbers/area-codes\");\n  }\n\n  list(): Promise<ManagedNumber[]> {\n    return this.http.get<ManagedNumber[]>(\"/managed-numbers\");\n  }\n\n  get(id: string): Promise<ManagedNumber> {\n    return this.http.get<ManagedNumber>(`/managed-numbers/${id}`);\n  }\n\n  provision(input: ProvisionManagedNumberInput): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(\"/managed-numbers\", input);\n  }\n\n  retryVerification(id: string, input?: RetryVerificationInput): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(`/managed-numbers/${id}/retry-verification`, input);\n  }\n\n  cancel(id: string): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(`/managed-numbers/${id}/cancel`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { SendMessageInput, SendMessageResult } from \"../types.js\";\n\nexport class MessagesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  send(input: SendMessageInput): Promise<SendMessageResult> {\n    return this.http.post<SendMessageResult>(\"/messages\", input);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { AvailablePlan, OrgPlan, PlansResult, UpdatePlanInput } from \"../types.js\";\n\nexport class PlansResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(): Promise<PlansResult> {\n    return this.http.get<PlansResult>(\"/plans\");\n  }\n\n  update(input: UpdatePlanInput): Promise<OrgPlan> {\n    return this.http.put<OrgPlan>(\"/plans\", input);\n  }\n\n  listAvailable(): Promise<AvailablePlan[]> {\n    return this.http.get<AvailablePlan[]>(\"/plans/available\");\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { SmtpConfig, UpsertSmtpConfigInput } from \"../types.js\";\n\nexport class SmtpResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(): Promise<SmtpConfig> {\n    return this.http.get<SmtpConfig>(\"/smtp-config\");\n  }\n\n  upsert(input: UpsertSmtpConfigInput): Promise<SmtpConfig> {\n    return this.http.put<SmtpConfig>(\"/smtp-config\", input);\n  }\n\n  delete(): Promise<void> {\n    return this.http.delete(\"/smtp-config\");\n  }\n\n  test(to: string): Promise<{ success: boolean; error?: string }> {\n    return this.http.post<{ success: boolean; error?: string }>(\"/smtp-config/test\", { to });\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { StatisticsParams, StatisticsResult } from \"../types.js\";\n\nexport class StatisticsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(params?: StatisticsParams): Promise<StatisticsResult> {\n    const qs = new URLSearchParams();\n    if (params?.from) qs.set(\"from\", params.from);\n    if (params?.to) qs.set(\"to\", params.to);\n    if (params?.groupBy) qs.set(\"groupBy\", params.groupBy);\n    const query = qs.toString();\n    return this.http.get<StatisticsResult>(`/statistics${query ? `?${query}` : \"\"}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateTemplateInput,\n  MessageTemplate,\n  MessageType,\n  SaveDraftInput,\n  UpdateTemplateInput,\n} from \"../types.js\";\n\nexport class TemplatesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(params?: { type?: MessageType; isActive?: boolean }): Promise<MessageTemplate[]> {\n    const qs = new URLSearchParams();\n    if (params?.type) qs.set(\"type\", params.type);\n    if (params?.isActive !== undefined) qs.set(\"isActive\", String(params.isActive));\n    const query = qs.toString();\n    return this.http.get<MessageTemplate[]>(`/templates${query ? `?${query}` : \"\"}`);\n  }\n\n  get(id: string): Promise<MessageTemplate> {\n    return this.http.get<MessageTemplate>(`/templates/${id}`);\n  }\n\n  create(input: CreateTemplateInput): Promise<MessageTemplate> {\n    return this.http.post<MessageTemplate>(\"/templates\", input);\n  }\n\n  update(id: string, input: UpdateTemplateInput): Promise<MessageTemplate> {\n    return this.http.put<MessageTemplate>(`/templates/${id}`, input);\n  }\n\n  saveDraft(id: string, input: SaveDraftInput): Promise<MessageTemplate> {\n    return this.http.patch<MessageTemplate>(`/templates/${id}/draft`, input);\n  }\n\n  publish(id: string): Promise<MessageTemplate> {\n    return this.http.post<MessageTemplate>(`/templates/${id}/publish`);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/templates/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateWebhookInput,\n  OrgWebhook,\n  OrgWebhookWithSecret,\n  RotateSecretResult,\n  UpdateWebhookInput,\n  WebhookDelivery,\n} from \"../types.js\";\n\nexport class WebhooksResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<OrgWebhook[]> {\n    return this.http.get<OrgWebhook[]>(\"/webhooks\");\n  }\n\n  create(input: CreateWebhookInput): Promise<OrgWebhookWithSecret> {\n    return this.http.post<OrgWebhookWithSecret>(\"/webhooks\", input);\n  }\n\n  update(id: string, input: UpdateWebhookInput): Promise<OrgWebhook> {\n    return this.http.put<OrgWebhook>(`/webhooks/${id}`, input);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/webhooks/${id}`);\n  }\n\n  listDeliveries(id: string): Promise<WebhookDelivery[]> {\n    return this.http.get<WebhookDelivery[]>(`/webhooks/${id}/deliveries`);\n  }\n\n  rotateSecret(id: string): Promise<RotateSecretResult> {\n    return this.http.post<RotateSecretResult>(`/webhooks/${id}/rotate-secret`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  ConnectWabaInput,\n  ConnectWhatsappNumberInput,\n  OrgWaba,\n  PhoneNumberStatusResult,\n  RegisterWhatsappNumberInput,\n  UpdateWhatsappProfileInput,\n  WabaHealthResult,\n  WhatsappNumber,\n  WhatsappNumberProfile,\n} from \"../types.js\";\n\nexport class WhatsappNumbersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  // ── WABAs ────────────────────────────────────────────────────────────────\n\n  listWabas(): Promise<OrgWaba[]> {\n    return this.http.get<OrgWaba[]>(\"/whatsapp/wabas\");\n  }\n\n  connectWaba(input: ConnectWabaInput): Promise<OrgWaba> {\n    return this.http.post<OrgWaba>(\"/whatsapp/wabas/connect\", input);\n  }\n\n  reconnectWaba(id: string): Promise<OrgWaba> {\n    return this.http.post<OrgWaba>(`/whatsapp/wabas/${id}/reconnect`);\n  }\n\n  disconnectWaba(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/wabas/${id}`);\n  }\n\n  getWabaHealth(id: string): Promise<WabaHealthResult> {\n    return this.http.get<WabaHealthResult>(`/whatsapp/wabas/${id}/health`);\n  }\n\n  // ── Numbers ──────────────────────────────────────────────────────────────\n\n  listNumbers(): Promise<WhatsappNumber[]> {\n    return this.http.get<WhatsappNumber[]>(\"/whatsapp/numbers\");\n  }\n\n  connectNumber(input: ConnectWhatsappNumberInput): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(\"/whatsapp/numbers/connect\", input);\n  }\n\n  registerNumber(input: RegisterWhatsappNumberInput): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(\"/whatsapp/numbers\", input);\n  }\n\n  verifyCode(id: string, code: string): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(`/whatsapp/numbers/${id}/verify-code`, { code });\n  }\n\n  resendCode(id: string): Promise<void> {\n    return this.http.post(`/whatsapp/numbers/${id}/resend-code`);\n  }\n\n  getProfile(id: string): Promise<WhatsappNumberProfile> {\n    return this.http.get<WhatsappNumberProfile>(`/whatsapp/numbers/${id}/profile`);\n  }\n\n  updateProfile(id: string, input: UpdateWhatsappProfileInput): Promise<WhatsappNumberProfile> {\n    return this.http.patch<WhatsappNumberProfile>(`/whatsapp/numbers/${id}/profile`, input);\n  }\n\n  updateDisplayName(id: string, displayName: string): Promise<WhatsappNumber> {\n    return this.http.patch<WhatsappNumber>(`/whatsapp/numbers/${id}`, { displayName });\n  }\n\n  getStatus(id: string): Promise<PhoneNumberStatusResult> {\n    return this.http.get<PhoneNumberStatusResult>(`/whatsapp/numbers/${id}/status`);\n  }\n\n  refreshNumbers(): Promise<WhatsappNumber[]> {\n    return this.http.post<WhatsappNumber[]>(\"/whatsapp/numbers/refresh\");\n  }\n\n  deleteNumber(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/numbers/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateWhatsappTemplateInput,\n  SyncWhatsappTemplatesResult,\n  UpdateWhatsappTemplateInput,\n  WhatsappTemplate,\n} from \"../types.js\";\n\nexport class WhatsappTemplatesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<WhatsappTemplate[]> {\n    return this.http.get<WhatsappTemplate[]>(\"/whatsapp/templates\");\n  }\n\n  create(input: CreateWhatsappTemplateInput): Promise<WhatsappTemplate> {\n    return this.http.post<WhatsappTemplate>(\"/whatsapp/templates\", input);\n  }\n\n  update(id: string, input: UpdateWhatsappTemplateInput): Promise<WhatsappTemplate> {\n    return this.http.put<WhatsappTemplate>(`/whatsapp/templates/${id}`, input);\n  }\n\n  sync(): Promise<SyncWhatsappTemplatesResult> {\n    return this.http.post<SyncWhatsappTemplatesResult>(\"/whatsapp/templates/sync\");\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/templates/${id}`);\n  }\n}\n","import { HttpClient, type HttpClientOptions } from \"./http.js\";\nimport { DomainsResource } from \"./resources/domains.js\";\nimport { HistoryResource } from \"./resources/history.js\";\nimport { ManagedNumbersResource } from \"./resources/managed-numbers.js\";\nimport { MessagesResource } from \"./resources/messages.js\";\nimport { PlansResource } from \"./resources/plans.js\";\nimport { SmtpResource } from \"./resources/smtp.js\";\nimport { StatisticsResource } from \"./resources/statistics.js\";\nimport { TemplatesResource } from \"./resources/templates.js\";\nimport { WebhooksResource } from \"./resources/webhooks.js\";\nimport { WhatsappNumbersResource } from \"./resources/whatsapp-numbers.js\";\nimport { WhatsappTemplatesResource } from \"./resources/whatsapp-templates.js\";\n\nexport interface PostClientOptions\n  extends Omit<HttpClientOptions, \"baseUrl\"> {\n  baseUrl?: string;\n}\n\nexport class PostClient {\n  private readonly http: HttpClient;\n\n  readonly messages: MessagesResource;\n  readonly templates: TemplatesResource;\n  readonly whatsappTemplates: WhatsappTemplatesResource;\n  readonly whatsappNumbers: WhatsappNumbersResource;\n  readonly domains: DomainsResource;\n  readonly webhooks: WebhooksResource;\n  readonly smtp: SmtpResource;\n  readonly plans: PlansResource;\n  readonly history: HistoryResource;\n  readonly statistics: StatisticsResource;\n  readonly managedNumbers: ManagedNumbersResource;\n\n  constructor(optionsOrHttp: HttpClientOptions | HttpClient) {\n    this.http = optionsOrHttp instanceof HttpClient ? optionsOrHttp : new HttpClient(optionsOrHttp);\n\n    this.messages = new MessagesResource(this.http);\n    this.templates = new TemplatesResource(this.http);\n    this.whatsappTemplates = new WhatsappTemplatesResource(this.http);\n    this.whatsappNumbers = new WhatsappNumbersResource(this.http);\n    this.domains = new DomainsResource(this.http);\n    this.webhooks = new WebhooksResource(this.http);\n    this.smtp = new SmtpResource(this.http);\n    this.plans = new PlansResource(this.http);\n    this.history = new HistoryResource(this.http);\n    this.statistics = new StatisticsResource(this.http);\n    this.managedNumbers = new ManagedNumbersResource(this.http);\n  }\n}\n","import type { FastifyBaseLogger, FastifyInstance, FastifyPluginAsync, FastifyRequest } from \"fastify\";\nimport fp from \"fastify-plugin\";\nimport { PostClient } from \"./client.js\";\nimport { HttpClient } from \"./http.js\";\n\nexport interface ServiceAccountOptions {\n  issuerUrl: string;\n  clientId: string;\n  clientSecret: string;\n}\n\nexport interface PostPluginOptions {\n  serviceAccount: ServiceAccountOptions;\n  baseUrl?: string;\n  logLevel?: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\" | \"silent\";\n}\n\ninterface CachedToken {\n  value: string;\n  expiresAt: number;\n  organizationId: string | undefined;\n}\n\ntype Logger = Pick<FastifyBaseLogger, \"debug\" | \"info\" | \"warn\" | \"error\">;\n\nfunction log(logger: Logger, msg: string, data?: Record<string, unknown>) {\n  if (data) {\n    process.stdout.write(`[geekapps-post] ${msg} ${JSON.stringify(data, null, 2)}\\n`);\n  } else {\n    process.stdout.write(`[geekapps-post] ${msg}\\n`);\n  }\n}\n\nfunction decodeJwtPayload(token: string): Record<string, unknown> {\n  try {\n    const [, payload] = token.split(\".\");\n    if (!payload) return {};\n    const json = Buffer.from(payload, \"base64url\").toString(\"utf-8\");\n    return JSON.parse(json) as Record<string, unknown>;\n  } catch {\n    return {};\n  }\n}\n\nclass TokenProvider {\n  private readonly issuerUrl: string;\n  private readonly clientId: string;\n  private readonly clientSecret: string;\n  private readonly logger: Logger;\n  private cached: CachedToken | null = null;\n  private inflight: Promise<CachedToken> | null = null;\n\n  constructor(options: PostPluginOptions, logger: Logger) {\n    this.issuerUrl = options.serviceAccount.issuerUrl.replace(/\\/$/, \"\");\n    this.clientId = options.serviceAccount.clientId;\n    this.clientSecret = options.serviceAccount.clientSecret;\n    this.logger = logger;\n  }\n\n  private async ensureFresh(): Promise<CachedToken> {\n    const now = Date.now();\n    if (this.cached && this.cached.expiresAt - now > 30_000) {\n      log(this.logger, \"service account token cache hit\", {\n        expiresAt: new Date(this.cached.expiresAt).toISOString(),\n      });\n      return this.cached;\n    }\n    log(this.logger, \"service account token cache miss — fetching new token\");\n    if (this.inflight) return this.inflight;\n    this.inflight = this.fetchToken().finally(() => { this.inflight = null; });\n    return this.inflight;\n  }\n\n  getToken(): Promise<string> {\n    return this.ensureFresh().then((c) => c.value);\n  }\n\n  getOrganizationId(): Promise<string | undefined> {\n    return this.ensureFresh().then((c) => c.organizationId);\n  }\n\n  private async fetchToken(): Promise<CachedToken> {\n    log(this.logger, \"fetching service account token\", {\n      url: `${this.issuerUrl}/auth/token`,\n      clientId: this.clientId,\n    });\n\n    const credentials = Buffer.from(`${this.clientId}:${this.clientSecret}`).toString(\"base64\");\n    const res = await fetch(`${this.issuerUrl}/auth/token`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Basic ${credentials}`,\n      },\n      body: JSON.stringify({ grant_type: \"service_account\" }),\n    });\n\n    if (!res.ok) {\n      const err = await res.json().catch(() => ({})) as { error?: string };\n      const msg = `auth failed (${res.status}): ${err.error ?? \"unknown error\"}`;\n      log(this.logger, msg);\n      throw new Error(`[geekapps-post] ${msg}`);\n    }\n\n    const data = await res.json() as { access_token: string; expires_in?: number };\n    const claims = decodeJwtPayload(data.access_token);\n    const organizationId =\n      typeof claims.organizationId === \"string\" ? claims.organizationId :\n      typeof claims.organization_id === \"string\" ? claims.organization_id :\n      undefined;\n\n    this.cached = {\n      value: data.access_token,\n      expiresAt: Date.now() + (data.expires_in ?? 420) * 1000,\n      organizationId,\n    };\n\n    log(this.logger, \"service account token acquired\", {\n      claims: { organizationId },\n      expiresIn: `${data.expires_in ?? 420}s`,\n    });\n\n    return this.cached;\n  }\n}\n\nexport class LoggingHttpClient extends HttpClient {\n  private readonly logger: Logger;\n  private readonly baseUrlLog: string;\n\n  constructor(options: ConstructorParameters<typeof HttpClient>[0], logger: Logger) {\n    super(options);\n    this.logger = logger;\n    this.baseUrlLog = options.baseUrl.replace(/\\/$/, \"\");\n  }\n\n  override async request<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n    const url = `${this.baseUrlLog}/v1${path}`;\n    log(this.logger, \"api request\", { method, url });\n    if (body !== undefined) {\n      log(this.logger, \"api request body\", { body });\n    }\n    try {\n      const result = await super.request<T>(method, path, body);\n      log(this.logger, \"api response\", { method, url, status: 200 });\n      return result;\n    } catch (err) {\n      const status = (err as { status?: number }).status;\n      log(this.logger, \"api response error\", { method, url, status });\n      throw err;\n    }\n  }\n}\n\ndeclare module \"fastify\" {\n  interface FastifyInstance {\n    postClient: PostClient;\n  }\n  interface FastifyRequest {\n    postClient: PostClient;\n  }\n}\n\nconst postPlugin: FastifyPluginAsync<PostPluginOptions> = async (\n  fastify: FastifyInstance,\n  options: PostPluginOptions,\n) => {\n  const logger = options.logLevel\n    ? fastify.log.child({ level: options.logLevel })\n    : fastify.log;\n\n  const baseUrl = options.baseUrl ?? \"https://post-api.geekapps.com.br\";\n  const provider = new TokenProvider(options, logger);\n\n  log(logger, \"geekapps post initialized\", {\n    issuerUrl: options.serviceAccount.issuerUrl,\n    baseUrl,\n    serviceAccount: true,\n  });\n\n  const http = new LoggingHttpClient(\n    {\n      baseUrl,\n      token: () => provider.getToken(),\n      organizationId: () => provider.getOrganizationId() as Promise<string>,\n    },\n    logger,\n  );\n\n  const client = new PostClient(http);\n\n  fastify.decorate(\"postClient\", client);\n\n  fastify.addHook(\"onRequest\", async (request: FastifyRequest) => {\n    request.postClient = client;\n  });\n};\n\nexport default fp(postPlugin, {\n  fastify: \">=4.0.0\",\n  name: \"@geekapps/post-fastify\",\n});\n"],"mappings":";AAAO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACkB,QAChB,SACgB,QAChB;AACA,UAAM,SAAS,GAAG,OAAO,KAAK,MAAM,KAAK,OAAO;AAJhC;AAEA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,IAAI,aAAa;AACf,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,cAAc;AAChB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,gBAAgB;AAClB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,oBAAoB;AACtB,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;ACnBO,IAAM,aAAN,MAAiB;AAAA,EAKtB,YAAY,SAA4B;AACtC,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,QAAQ,QAAQ;AACrB,SAAK,iBAAiB,QAAQ;AAAA,EAChC;AAAA,EAEA,MAAc,eAAgC;AAC5C,WAAO,OAAO,KAAK,UAAU,aAAa,MAAM,KAAK,MAAM,IAAI,KAAK;AAAA,EACtE;AAAA,EAEA,MAAc,eAA4C;AACxD,QAAI,CAAC,KAAK,eAAgB,QAAO;AACjC,WAAO,OAAO,KAAK,mBAAmB,aAClC,MAAM,KAAK,eAAe,IAC1B,KAAK;AAAA,EACX;AAAA,EAEA,MAAM,QACJ,QACA,MACA,MACY;AACZ,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,QAAQ,MAAM,KAAK,aAAa;AAEtC,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,IAAI,IAAI;AAAA,MACnD;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QACnE,GAAI,QAAQ,EAAE,qBAAqB,MAAM,IAAI,CAAC;AAAA,MAChD;AAAA,MACA,GAAI,SAAS,SAAY,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,MAE3D,OAAO;AAAA,IACT,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAI7C,YAAM,IAAI;AAAA,QACR,IAAI;AAAA,QACJ,IAAI,SAAS,QAAQ,IAAI,MAAM;AAAA,QAC/B,IAAI;AAAA,MACN;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEA,IAAO,MAAc;AACnB,WAAO,KAAK,QAAW,OAAO,IAAI;AAAA,EACpC;AAAA,EAEA,KAAQ,MAAc,MAAgB;AACpC,WAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;AAAA,EAC3C;AAAA,EAEA,IAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,QAAW,OAAO,MAAM,IAAI;AAAA,EAC1C;AAAA,EAEA,MAAS,MAAc,MAAgB;AACrC,WAAO,KAAK,QAAW,SAAS,MAAM,IAAI;AAAA,EAC5C;AAAA,EAEA,OAAiB,MAAc;AAC7B,WAAO,KAAK,QAAW,UAAU,IAAI;AAAA,EACvC;AACF;;;ACpFO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAA6B;AAC3B,WAAO,KAAK,KAAK,IAAiB,UAAU;AAAA,EAC9C;AAAA,EAEA,IAAI,IAAgC;AAClC,WAAO,KAAK,KAAK,IAAe,YAAY,EAAE,EAAE;AAAA,EAClD;AAAA,EAEA,OAAO,OAAuD;AAC5D,WAAO,KAAK,KAAK,KAAyB,YAAY,KAAK;AAAA,EAC7D;AAAA,EAEA,OAAO,IAAwD;AAC7D,WAAO,KAAK,KAAK,KAAwC,YAAY,EAAE,SAAS;AAAA,EAClF;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,YAAY,EAAE,EAAE;AAAA,EAC1C;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,QAAkE;AACrE,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,OAAQ,IAAG,IAAI,UAAU,OAAO,MAAM;AAClD,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,GAAI,IAAG,IAAI,MAAM,OAAO,EAAE;AACtC,QAAI,QAAQ,SAAS,OAAW,IAAG,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AAClE,QAAI,QAAQ,UAAU,OAAW,IAAG,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACrE,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAiC,WAAW,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACzF;AAAA,EAEA,IAAI,IAAuC;AACzC,WAAO,KAAK,KAAK,IAAsB,YAAY,EAAE,EAAE;AAAA,EACzD;AACF;;;ACDO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,gBAAqC;AACnC,WAAO,KAAK,KAAK,IAAgB,6BAA6B;AAAA,EAChE;AAAA,EAEA,OAAiC;AAC/B,WAAO,KAAK,KAAK,IAAqB,kBAAkB;AAAA,EAC1D;AAAA,EAEA,IAAI,IAAoC;AACtC,WAAO,KAAK,KAAK,IAAmB,oBAAoB,EAAE,EAAE;AAAA,EAC9D;AAAA,EAEA,UAAU,OAA4D;AACpE,WAAO,KAAK,KAAK,KAAoB,oBAAoB,KAAK;AAAA,EAChE;AAAA,EAEA,kBAAkB,IAAY,OAAwD;AACpF,WAAO,KAAK,KAAK,KAAoB,oBAAoB,EAAE,uBAAuB,KAAK;AAAA,EACzF;AAAA,EAEA,OAAO,IAAoC;AACzC,WAAO,KAAK,KAAK,KAAoB,oBAAoB,EAAE,SAAS;AAAA,EACtE;AACF;;;AC3CO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,OAAqD;AACxD,WAAO,KAAK,KAAK,KAAwB,aAAa,KAAK;AAAA,EAC7D;AACF;;;ACNO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,MAA4B;AAC1B,WAAO,KAAK,KAAK,IAAiB,QAAQ;AAAA,EAC5C;AAAA,EAEA,OAAO,OAA0C;AAC/C,WAAO,KAAK,KAAK,IAAa,UAAU,KAAK;AAAA,EAC/C;AAAA,EAEA,gBAA0C;AACxC,WAAO,KAAK,KAAK,IAAqB,kBAAkB;AAAA,EAC1D;AACF;;;ACdO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,MAA2B;AACzB,WAAO,KAAK,KAAK,IAAgB,cAAc;AAAA,EACjD;AAAA,EAEA,OAAO,OAAmD;AACxD,WAAO,KAAK,KAAK,IAAgB,gBAAgB,KAAK;AAAA,EACxD;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,KAAK,OAAO,cAAc;AAAA,EACxC;AAAA,EAEA,KAAK,IAA2D;AAC9D,WAAO,KAAK,KAAK,KAA2C,qBAAqB,EAAE,GAAG,CAAC;AAAA,EACzF;AACF;;;AClBO,IAAM,qBAAN,MAAyB;AAAA,EAC9B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,IAAI,QAAsD;AACxD,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,GAAI,IAAG,IAAI,MAAM,OAAO,EAAE;AACtC,QAAI,QAAQ,QAAS,IAAG,IAAI,WAAW,OAAO,OAAO;AACrD,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAsB,cAAc,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACjF;AACF;;;ACLO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,QAAiF;AACpF,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,aAAa,OAAW,IAAG,IAAI,YAAY,OAAO,OAAO,QAAQ,CAAC;AAC9E,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAuB,aAAa,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACjF;AAAA,EAEA,IAAI,IAAsC;AACxC,WAAO,KAAK,KAAK,IAAqB,cAAc,EAAE,EAAE;AAAA,EAC1D;AAAA,EAEA,OAAO,OAAsD;AAC3D,WAAO,KAAK,KAAK,KAAsB,cAAc,KAAK;AAAA,EAC5D;AAAA,EAEA,OAAO,IAAY,OAAsD;AACvE,WAAO,KAAK,KAAK,IAAqB,cAAc,EAAE,IAAI,KAAK;AAAA,EACjE;AAAA,EAEA,UAAU,IAAY,OAAiD;AACrE,WAAO,KAAK,KAAK,MAAuB,cAAc,EAAE,UAAU,KAAK;AAAA,EACzE;AAAA,EAEA,QAAQ,IAAsC;AAC5C,WAAO,KAAK,KAAK,KAAsB,cAAc,EAAE,UAAU;AAAA,EACnE;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,cAAc,EAAE,EAAE;AAAA,EAC5C;AACF;;;ACjCO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAA8B;AAC5B,WAAO,KAAK,KAAK,IAAkB,WAAW;AAAA,EAChD;AAAA,EAEA,OAAO,OAA0D;AAC/D,WAAO,KAAK,KAAK,KAA2B,aAAa,KAAK;AAAA,EAChE;AAAA,EAEA,OAAO,IAAY,OAAgD;AACjE,WAAO,KAAK,KAAK,IAAgB,aAAa,EAAE,IAAI,KAAK;AAAA,EAC3D;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,aAAa,EAAE,EAAE;AAAA,EAC3C;AAAA,EAEA,eAAe,IAAwC;AACrD,WAAO,KAAK,KAAK,IAAuB,aAAa,EAAE,aAAa;AAAA,EACtE;AAAA,EAEA,aAAa,IAAyC;AACpD,WAAO,KAAK,KAAK,KAAyB,aAAa,EAAE,gBAAgB;AAAA,EAC3E;AACF;;;ACvBO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA,EAIhD,YAAgC;AAC9B,WAAO,KAAK,KAAK,IAAe,iBAAiB;AAAA,EACnD;AAAA,EAEA,YAAY,OAA2C;AACrD,WAAO,KAAK,KAAK,KAAc,2BAA2B,KAAK;AAAA,EACjE;AAAA,EAEA,cAAc,IAA8B;AAC1C,WAAO,KAAK,KAAK,KAAc,mBAAmB,EAAE,YAAY;AAAA,EAClE;AAAA,EAEA,eAAe,IAA2B;AACxC,WAAO,KAAK,KAAK,OAAO,mBAAmB,EAAE,EAAE;AAAA,EACjD;AAAA,EAEA,cAAc,IAAuC;AACnD,WAAO,KAAK,KAAK,IAAsB,mBAAmB,EAAE,SAAS;AAAA,EACvE;AAAA;AAAA,EAIA,cAAyC;AACvC,WAAO,KAAK,KAAK,IAAsB,mBAAmB;AAAA,EAC5D;AAAA,EAEA,cAAc,OAA4D;AACxE,WAAO,KAAK,KAAK,KAAqB,6BAA6B,KAAK;AAAA,EAC1E;AAAA,EAEA,eAAe,OAA6D;AAC1E,WAAO,KAAK,KAAK,KAAqB,qBAAqB,KAAK;AAAA,EAClE;AAAA,EAEA,WAAW,IAAY,MAAuC;AAC5D,WAAO,KAAK,KAAK,KAAqB,qBAAqB,EAAE,gBAAgB,EAAE,KAAK,CAAC;AAAA,EACvF;AAAA,EAEA,WAAW,IAA2B;AACpC,WAAO,KAAK,KAAK,KAAK,qBAAqB,EAAE,cAAc;AAAA,EAC7D;AAAA,EAEA,WAAW,IAA4C;AACrD,WAAO,KAAK,KAAK,IAA2B,qBAAqB,EAAE,UAAU;AAAA,EAC/E;AAAA,EAEA,cAAc,IAAY,OAAmE;AAC3F,WAAO,KAAK,KAAK,MAA6B,qBAAqB,EAAE,YAAY,KAAK;AAAA,EACxF;AAAA,EAEA,kBAAkB,IAAY,aAA8C;AAC1E,WAAO,KAAK,KAAK,MAAsB,qBAAqB,EAAE,IAAI,EAAE,YAAY,CAAC;AAAA,EACnF;AAAA,EAEA,UAAU,IAA8C;AACtD,WAAO,KAAK,KAAK,IAA6B,qBAAqB,EAAE,SAAS;AAAA,EAChF;AAAA,EAEA,iBAA4C;AAC1C,WAAO,KAAK,KAAK,KAAuB,2BAA2B;AAAA,EACrE;AAAA,EAEA,aAAa,IAA2B;AACtC,WAAO,KAAK,KAAK,OAAO,qBAAqB,EAAE,EAAE;AAAA,EACnD;AACF;;;AC3EO,IAAM,4BAAN,MAAgC;AAAA,EACrC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAAoC;AAClC,WAAO,KAAK,KAAK,IAAwB,qBAAqB;AAAA,EAChE;AAAA,EAEA,OAAO,OAA+D;AACpE,WAAO,KAAK,KAAK,KAAuB,uBAAuB,KAAK;AAAA,EACtE;AAAA,EAEA,OAAO,IAAY,OAA+D;AAChF,WAAO,KAAK,KAAK,IAAsB,uBAAuB,EAAE,IAAI,KAAK;AAAA,EAC3E;AAAA,EAEA,OAA6C;AAC3C,WAAO,KAAK,KAAK,KAAkC,0BAA0B;AAAA,EAC/E;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,uBAAuB,EAAE,EAAE;AAAA,EACrD;AACF;;;ACZO,IAAM,aAAN,MAAiB;AAAA,EAetB,YAAY,eAA+C;AACzD,SAAK,OAAO,yBAAyB,aAAa,gBAAgB,IAAI,WAAW,aAAa;AAE9F,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,YAAY,IAAI,kBAAkB,KAAK,IAAI;AAChD,SAAK,oBAAoB,IAAI,0BAA0B,KAAK,IAAI;AAChE,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAC5C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;AACxC,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAC5C,SAAK,aAAa,IAAI,mBAAmB,KAAK,IAAI;AAClD,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAAA,EAC5D;AACF;;;AC/CA,OAAO,QAAQ;AAwBf,SAAS,IAAI,QAAgB,KAAa,MAAgC;AACxE,MAAI,MAAM;AACR,YAAQ,OAAO,MAAM,mBAAmB,GAAG,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,EAClF,OAAO;AACL,YAAQ,OAAO,MAAM,mBAAmB,GAAG;AAAA,CAAI;AAAA,EACjD;AACF;AAEA,SAAS,iBAAiB,OAAwC;AAChE,MAAI;AACF,UAAM,CAAC,EAAE,OAAO,IAAI,MAAM,MAAM,GAAG;AACnC,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,EAAE,SAAS,OAAO;AAC/D,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAQlB,YAAY,SAA4B,QAAgB;AAHxD,SAAQ,SAA6B;AACrC,SAAQ,WAAwC;AAG9C,SAAK,YAAY,QAAQ,eAAe,UAAU,QAAQ,OAAO,EAAE;AACnE,SAAK,WAAW,QAAQ,eAAe;AACvC,SAAK,eAAe,QAAQ,eAAe;AAC3C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAc,cAAoC;AAChD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,KAAK,UAAU,KAAK,OAAO,YAAY,MAAM,KAAQ;AACvD,UAAI,KAAK,QAAQ,mCAAmC;AAAA,QAClD,WAAW,IAAI,KAAK,KAAK,OAAO,SAAS,EAAE,YAAY;AAAA,MACzD,CAAC;AACD,aAAO,KAAK;AAAA,IACd;AACA,QAAI,KAAK,QAAQ,4DAAuD;AACxE,QAAI,KAAK,SAAU,QAAO,KAAK;AAC/B,SAAK,WAAW,KAAK,WAAW,EAAE,QAAQ,MAAM;AAAE,WAAK,WAAW;AAAA,IAAM,CAAC;AACzE,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAA4B;AAC1B,WAAO,KAAK,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EAC/C;AAAA,EAEA,oBAAiD;AAC/C,WAAO,KAAK,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc;AAAA,EACxD;AAAA,EAEA,MAAc,aAAmC;AAC/C,QAAI,KAAK,QAAQ,kCAAkC;AAAA,MACjD,KAAK,GAAG,KAAK,SAAS;AAAA,MACtB,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,UAAM,cAAc,OAAO,KAAK,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY,EAAE,EAAE,SAAS,QAAQ;AAC1F,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,SAAS,eAAe;AAAA,MACtD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,SAAS,WAAW;AAAA,MACrC;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,YAAY,kBAAkB,CAAC;AAAA,IACxD,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC7C,YAAM,MAAM,gBAAgB,IAAI,MAAM,MAAM,IAAI,SAAS,eAAe;AACxE,UAAI,KAAK,QAAQ,GAAG;AACpB,YAAM,IAAI,MAAM,mBAAmB,GAAG,EAAE;AAAA,IAC1C;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,KAAK,YAAY;AACjD,UAAM,iBACJ,OAAO,OAAO,mBAAmB,WAAW,OAAO,iBACnD,OAAO,OAAO,oBAAoB,WAAW,OAAO,kBACpD;AAEF,SAAK,SAAS;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,WAAW,KAAK,IAAI,KAAK,KAAK,cAAc,OAAO;AAAA,MACnD;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,kCAAkC;AAAA,MACjD,QAAQ,EAAE,eAAe;AAAA,MACzB,WAAW,GAAG,KAAK,cAAc,GAAG;AAAA,IACtC,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,WAAW;AAAA,EAIhD,YAAY,SAAsD,QAAgB;AAChF,UAAM,OAAO;AACb,SAAK,SAAS;AACd,SAAK,aAAa,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACrD;AAAA,EAEA,MAAe,QAAqB,QAAgB,MAAc,MAA4B;AAC5F,UAAM,MAAM,GAAG,KAAK,UAAU,MAAM,IAAI;AACxC,QAAI,KAAK,QAAQ,eAAe,EAAE,QAAQ,IAAI,CAAC;AAC/C,QAAI,SAAS,QAAW;AACtB,UAAI,KAAK,QAAQ,oBAAoB,EAAE,KAAK,CAAC;AAAA,IAC/C;AACA,QAAI;AACF,YAAM,SAAS,MAAM,MAAM,QAAW,QAAQ,MAAM,IAAI;AACxD,UAAI,KAAK,QAAQ,gBAAgB,EAAE,QAAQ,KAAK,QAAQ,IAAI,CAAC;AAC7D,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,YAAM,SAAU,IAA4B;AAC5C,UAAI,KAAK,QAAQ,sBAAsB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAC9D,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAWA,IAAM,aAAoD,OACxD,SACA,YACG;AACH,QAAM,SAAS,QAAQ,WACnB,QAAQ,IAAI,MAAM,EAAE,OAAO,QAAQ,SAAS,CAAC,IAC7C,QAAQ;AAEZ,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,IAAI,cAAc,SAAS,MAAM;AAElD,MAAI,QAAQ,6BAA6B;AAAA,IACvC,WAAW,QAAQ,eAAe;AAAA,IAClC;AAAA,IACA,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,OAAO,IAAI;AAAA,IACf;AAAA,MACE;AAAA,MACA,OAAO,MAAM,SAAS,SAAS;AAAA,MAC/B,gBAAgB,MAAM,SAAS,kBAAkB;AAAA,IACnD;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,WAAW,IAAI;AAElC,UAAQ,SAAS,cAAc,MAAM;AAErC,UAAQ,QAAQ,aAAa,OAAO,YAA4B;AAC9D,YAAQ,aAAa;AAAA,EACvB,CAAC;AACH;AAEA,IAAO,iBAAQ,GAAG,YAAY;AAAA,EAC5B,SAAS;AAAA,EACT,MAAM;AACR,CAAC;","names":[]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/resources/domains.ts","../src/resources/history.ts","../src/resources/managed-numbers.ts","../src/resources/messages.ts","../src/resources/plans.ts","../src/resources/smtp.ts","../src/resources/statistics.ts","../src/resources/templates.ts","../src/resources/webhooks.ts","../src/resources/whatsapp-calls.ts","../src/resources/whatsapp-numbers.ts","../src/resources/whatsapp-templates.ts","../src/client.ts","../src/plugin.ts","../src/webhook.ts"],"sourcesContent":["export class PostApiError extends Error {\n  constructor(\n    public readonly status: number,\n    message: string,\n    public readonly detail?: string,\n  ) {\n    super(detail ? `${message}: ${detail}` : message);\n    this.name = \"PostApiError\";\n  }\n\n  get isNotFound() {\n    return this.status === 404;\n  }\n\n  get isUnauthorized() {\n    return this.status === 401;\n  }\n\n  get isForbidden() {\n    return this.status === 403;\n  }\n\n  get isRateLimited() {\n    return this.status === 429;\n  }\n\n  get isValidationError() {\n    return this.status === 400;\n  }\n}\n","import { PostApiError } from \"./errors.js\";\n\nexport type TokenResolver = string | (() => string | Promise<string>);\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  token: TokenResolver;\n  organizationId?: string | (() => string | Promise<string>);\n}\n\nexport class HttpClient {\n  private readonly baseUrl: string;\n  private readonly token: TokenResolver;\n  private readonly organizationId?: string | (() => string | Promise<string>);\n\n  constructor(options: HttpClientOptions) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n    this.token = options.token;\n    this.organizationId = options.organizationId;\n  }\n\n  private async resolveToken(): Promise<string> {\n    return typeof this.token === \"function\" ? await this.token() : this.token;\n  }\n\n  private async resolveOrgId(): Promise<string | undefined> {\n    if (!this.organizationId) return undefined;\n    return typeof this.organizationId === \"function\"\n      ? await this.organizationId()\n      : this.organizationId;\n  }\n\n  async request<T = unknown>(\n    method: string,\n    path: string,\n    body?: unknown,\n  ): Promise<T> {\n    const token = await this.resolveToken();\n    const orgId = await this.resolveOrgId();\n\n    const res = await fetch(`${this.baseUrl}/v1${path}`, {\n      method,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        ...(body !== undefined ? { \"Content-Type\": \"application/json\" } : {}),\n        ...(orgId ? { \"X-Organization-Id\": orgId } : {}),\n      },\n      ...(body !== undefined ? { body: JSON.stringify(body) } : {}),\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      cache: \"no-store\" as any,\n    });\n\n    if (!res.ok) {\n      const err = await res.json().catch(() => ({})) as {\n        error?: string;\n        detail?: string;\n      };\n      throw new PostApiError(\n        res.status,\n        err.error ?? `HTTP ${res.status}`,\n        err.detail,\n      );\n    }\n\n    if (res.status === 204) return undefined as T;\n    return res.json() as Promise<T>;\n  }\n\n  get<T>(path: string) {\n    return this.request<T>(\"GET\", path);\n  }\n\n  post<T>(path: string, body?: unknown) {\n    return this.request<T>(\"POST\", path, body);\n  }\n\n  put<T>(path: string, body?: unknown) {\n    return this.request<T>(\"PUT\", path, body);\n  }\n\n  patch<T>(path: string, body?: unknown) {\n    return this.request<T>(\"PATCH\", path, body);\n  }\n\n  delete<T = void>(path: string) {\n    return this.request<T>(\"DELETE\", path);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { CreateDomainInput, CreateDomainResult, OrgDomain } from \"../types.js\";\n\nexport class DomainsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<OrgDomain[]> {\n    return this.http.get<OrgDomain[]>(\"/domains\");\n  }\n\n  get(id: string): Promise<OrgDomain> {\n    return this.http.get<OrgDomain>(`/domains/${id}`);\n  }\n\n  create(input: CreateDomainInput): Promise<CreateDomainResult> {\n    return this.http.post<CreateDomainResult>(\"/domains\", input);\n  }\n\n  verify(id: string): Promise<{ status: \"verified\" | \"failed\" }> {\n    return this.http.post<{ status: \"verified\" | \"failed\" }>(`/domains/${id}/verify`);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/domains/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { ListHistoryParams, MessageLog, MessageLogDetail, PaginatedResult } from \"../types.js\";\n\nexport class HistoryResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(params?: ListHistoryParams): Promise<PaginatedResult<MessageLog>> {\n    const qs = new URLSearchParams();\n    if (params?.type) qs.set(\"type\", params.type);\n    if (params?.status) qs.set(\"status\", params.status);\n    if (params?.from) qs.set(\"from\", params.from);\n    if (params?.to) qs.set(\"to\", params.to);\n    if (params?.page !== undefined) qs.set(\"page\", String(params.page));\n    if (params?.limit !== undefined) qs.set(\"limit\", String(params.limit));\n    const query = qs.toString();\n    return this.http.get<PaginatedResult<MessageLog>>(`/history${query ? `?${query}` : \"\"}`);\n  }\n\n  get(id: string): Promise<MessageLogDetail> {\n    return this.http.get<MessageLogDetail>(`/history/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { AreaCode, ManagedNumber } from \"../types.js\";\n\nexport interface ProvisionManagedNumberInput {\n  areaCode: number;\n  name?: string;\n  displayName: string;\n  otpMethod?: \"SMS\" | \"VOICE\";\n  otpLanguage?: string;\n  pin?: string;\n  orgWabaId?: string;\n  wabaId?: string;\n  accessToken?: string;\n}\n\nexport interface RetryVerificationInput {\n  otpMethod?: \"SMS\" | \"VOICE\";\n  otpLanguage?: string;\n}\n\nexport class ManagedNumbersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  listAreaCodes(): Promise<AreaCode[]> {\n    return this.http.get<AreaCode[]>(\"/managed-numbers/area-codes\");\n  }\n\n  list(): Promise<ManagedNumber[]> {\n    return this.http.get<ManagedNumber[]>(\"/managed-numbers\");\n  }\n\n  get(id: string): Promise<ManagedNumber> {\n    return this.http.get<ManagedNumber>(`/managed-numbers/${id}`);\n  }\n\n  provision(input: ProvisionManagedNumberInput): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(\"/managed-numbers\", input);\n  }\n\n  retryVerification(id: string, input?: RetryVerificationInput): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(`/managed-numbers/${id}/retry-verification`, input);\n  }\n\n  cancel(id: string): Promise<ManagedNumber> {\n    return this.http.post<ManagedNumber>(`/managed-numbers/${id}/cancel`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { SendMessageInput, SendMessageResult } from \"../types.js\";\n\nexport class MessagesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  send(input: SendMessageInput): Promise<SendMessageResult> {\n    return this.http.post<SendMessageResult>(\"/messages\", input);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { AvailablePlan, OrgPlan, PlansResult, UpdatePlanInput } from \"../types.js\";\n\nexport class PlansResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(): Promise<PlansResult> {\n    return this.http.get<PlansResult>(\"/plans\");\n  }\n\n  update(input: UpdatePlanInput): Promise<OrgPlan> {\n    return this.http.put<OrgPlan>(\"/plans\", input);\n  }\n\n  listAvailable(): Promise<AvailablePlan[]> {\n    return this.http.get<AvailablePlan[]>(\"/plans/available\");\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { SmtpConfig, UpsertSmtpConfigInput } from \"../types.js\";\n\nexport class SmtpResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(): Promise<SmtpConfig> {\n    return this.http.get<SmtpConfig>(\"/smtp-config\");\n  }\n\n  upsert(input: UpsertSmtpConfigInput): Promise<SmtpConfig> {\n    return this.http.put<SmtpConfig>(\"/smtp-config\", input);\n  }\n\n  delete(): Promise<void> {\n    return this.http.delete(\"/smtp-config\");\n  }\n\n  test(to: string): Promise<{ success: boolean; error?: string }> {\n    return this.http.post<{ success: boolean; error?: string }>(\"/smtp-config/test\", { to });\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type { StatisticsParams, StatisticsResult } from \"../types.js\";\n\nexport class StatisticsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  get(params?: StatisticsParams): Promise<StatisticsResult> {\n    const qs = new URLSearchParams();\n    if (params?.from) qs.set(\"from\", params.from);\n    if (params?.to) qs.set(\"to\", params.to);\n    if (params?.groupBy) qs.set(\"groupBy\", params.groupBy);\n    const query = qs.toString();\n    return this.http.get<StatisticsResult>(`/statistics${query ? `?${query}` : \"\"}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateTemplateInput,\n  MessageTemplate,\n  MessageType,\n  SaveDraftInput,\n  UpdateTemplateInput,\n} from \"../types.js\";\n\nexport class TemplatesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(params?: { type?: MessageType; isActive?: boolean }): Promise<MessageTemplate[]> {\n    const qs = new URLSearchParams();\n    if (params?.type) qs.set(\"type\", params.type);\n    if (params?.isActive !== undefined) qs.set(\"isActive\", String(params.isActive));\n    const query = qs.toString();\n    return this.http.get<MessageTemplate[]>(`/templates${query ? `?${query}` : \"\"}`);\n  }\n\n  get(id: string): Promise<MessageTemplate> {\n    return this.http.get<MessageTemplate>(`/templates/${id}`);\n  }\n\n  create(input: CreateTemplateInput): Promise<MessageTemplate> {\n    return this.http.post<MessageTemplate>(\"/templates\", input);\n  }\n\n  update(id: string, input: UpdateTemplateInput): Promise<MessageTemplate> {\n    return this.http.put<MessageTemplate>(`/templates/${id}`, input);\n  }\n\n  saveDraft(id: string, input: SaveDraftInput): Promise<MessageTemplate> {\n    return this.http.patch<MessageTemplate>(`/templates/${id}/draft`, input);\n  }\n\n  publish(id: string): Promise<MessageTemplate> {\n    return this.http.post<MessageTemplate>(`/templates/${id}/publish`);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/templates/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateWebhookInput,\n  OrgWebhook,\n  OrgWebhookWithSecret,\n  RotateSecretResult,\n  UpdateWebhookInput,\n  WebhookDelivery,\n} from \"../types.js\";\n\nexport class WebhooksResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<OrgWebhook[]> {\n    return this.http.get<OrgWebhook[]>(\"/webhooks\");\n  }\n\n  create(input: CreateWebhookInput): Promise<OrgWebhookWithSecret> {\n    return this.http.post<OrgWebhookWithSecret>(\"/webhooks\", input);\n  }\n\n  update(id: string, input: UpdateWebhookInput): Promise<OrgWebhook> {\n    return this.http.put<OrgWebhook>(`/webhooks/${id}`, input);\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/webhooks/${id}`);\n  }\n\n  listDeliveries(id: string): Promise<WebhookDelivery[]> {\n    return this.http.get<WebhookDelivery[]>(`/webhooks/${id}/deliveries`);\n  }\n\n  rotateSecret(id: string): Promise<RotateSecretResult> {\n    return this.http.post<RotateSecretResult>(`/webhooks/${id}/rotate-secret`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CallActionResult,\n  CallAnswerInput,\n  CallPermissionStatus,\n  CallTargetInput,\n  CallingSettings,\n  ConnectCallInput,\n  ConnectCallResult,\n  RequestCallPermissionInput,\n  RequestCallPermissionResult,\n  UpdateCallingSettingsInput,\n} from \"../types.js\";\n\n// WhatsApp Cloud API Calling. Signaling only: media flows over WebRTC between\n// Meta and your server. Incoming calls arrive via the `call_connect` webhook.\nexport class WhatsappCallsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** Lê a configuração de chamadas de um número (id do WhatsappNumber no Post). */\n  getSettings(numberId: string): Promise<CallingSettings> {\n    return this.http.get<CallingSettings>(`/whatsapp/numbers/${numberId}/calling`);\n  }\n\n  /** Ativa/desativa chamadas no número. */\n  updateSettings(numberId: string, input: UpdateCallingSettingsInput): Promise<CallingSettings> {\n    return this.http.put<CallingSettings>(`/whatsapp/numbers/${numberId}/calling`, input);\n  }\n\n  /** Pré-aceita uma chamada recebida (opcional, acelera a conexão de mídia). */\n  preAccept(callId: string, input: CallAnswerInput): Promise<CallActionResult> {\n    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/pre-accept`, input);\n  }\n\n  /** Aceita uma chamada recebida enviando o SDP de resposta. */\n  accept(callId: string, input: CallAnswerInput): Promise<CallActionResult> {\n    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/accept`, input);\n  }\n\n  /** Rejeita uma chamada recebida. */\n  reject(callId: string, input: CallTargetInput = {}): Promise<CallActionResult> {\n    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/reject`, input);\n  }\n\n  /** Encerra uma chamada em andamento. */\n  terminate(callId: string, input: CallTargetInput = {}): Promise<CallActionResult> {\n    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/terminate`, input);\n  }\n\n  /** Inicia uma chamada (business-initiated). Exige permissão prévia do usuário. */\n  connect(input: ConnectCallInput): Promise<ConnectCallResult> {\n    return this.http.post<ConnectCallResult>(\"/whatsapp/calls\", input);\n  }\n\n  /** Envia ao usuário o pedido de permissão para receber chamadas. */\n  requestPermission(input: RequestCallPermissionInput): Promise<RequestCallPermissionResult> {\n    return this.http.post<RequestCallPermissionResult>(\"/whatsapp/calls/permissions\", input);\n  }\n\n  /** Consulta o status de permissão de chamada de um usuário. */\n  getPermission(to: string, phoneNumberId?: string): Promise<CallPermissionStatus> {\n    return this.http.get<CallPermissionStatus>(`/whatsapp/calls/permissions?${new URLSearchParams({ to, ...(phoneNumberId ? { phoneNumberId } : {}) })}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  ConnectWabaInput,\n  ConnectWhatsappNumberInput,\n  OrgWaba,\n  PhoneNumberStatusResult,\n  RegisterWhatsappNumberInput,\n  UpdateWhatsappProfileInput,\n  WabaHealthResult,\n  WhatsappNumber,\n  WhatsappNumberProfile,\n} from \"../types.js\";\n\nexport class WhatsappNumbersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  // ── WABAs ────────────────────────────────────────────────────────────────\n\n  listWabas(): Promise<OrgWaba[]> {\n    return this.http.get<OrgWaba[]>(\"/whatsapp/wabas\");\n  }\n\n  connectWaba(input: ConnectWabaInput): Promise<OrgWaba> {\n    return this.http.post<OrgWaba>(\"/whatsapp/wabas/connect\", input);\n  }\n\n  reconnectWaba(id: string): Promise<OrgWaba> {\n    return this.http.post<OrgWaba>(`/whatsapp/wabas/${id}/reconnect`);\n  }\n\n  disconnectWaba(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/wabas/${id}`);\n  }\n\n  getWabaHealth(id: string): Promise<WabaHealthResult> {\n    return this.http.get<WabaHealthResult>(`/whatsapp/wabas/${id}/health`);\n  }\n\n  // ── Numbers ──────────────────────────────────────────────────────────────\n\n  listNumbers(): Promise<WhatsappNumber[]> {\n    return this.http.get<WhatsappNumber[]>(\"/whatsapp/numbers\");\n  }\n\n  connectNumber(input: ConnectWhatsappNumberInput): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(\"/whatsapp/numbers/connect\", input);\n  }\n\n  registerNumber(input: RegisterWhatsappNumberInput): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(\"/whatsapp/numbers\", input);\n  }\n\n  verifyCode(id: string, code: string): Promise<WhatsappNumber> {\n    return this.http.post<WhatsappNumber>(`/whatsapp/numbers/${id}/verify-code`, { code });\n  }\n\n  resendCode(id: string): Promise<void> {\n    return this.http.post(`/whatsapp/numbers/${id}/resend-code`);\n  }\n\n  getProfile(id: string): Promise<WhatsappNumberProfile> {\n    return this.http.get<WhatsappNumberProfile>(`/whatsapp/numbers/${id}/profile`);\n  }\n\n  updateProfile(id: string, input: UpdateWhatsappProfileInput): Promise<WhatsappNumberProfile> {\n    return this.http.patch<WhatsappNumberProfile>(`/whatsapp/numbers/${id}/profile`, input);\n  }\n\n  updateDisplayName(id: string, displayName: string): Promise<WhatsappNumber> {\n    return this.http.patch<WhatsappNumber>(`/whatsapp/numbers/${id}`, { displayName });\n  }\n\n  getStatus(id: string): Promise<PhoneNumberStatusResult> {\n    return this.http.get<PhoneNumberStatusResult>(`/whatsapp/numbers/${id}/status`);\n  }\n\n  refreshNumbers(): Promise<WhatsappNumber[]> {\n    return this.http.post<WhatsappNumber[]>(\"/whatsapp/numbers/refresh\");\n  }\n\n  deleteNumber(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/numbers/${id}`);\n  }\n}\n","import type { HttpClient } from \"../http.js\";\nimport type {\n  CreateWhatsappTemplateInput,\n  SyncWhatsappTemplatesResult,\n  UpdateWhatsappTemplateInput,\n  WhatsappTemplate,\n} from \"../types.js\";\n\nexport class WhatsappTemplatesResource {\n  constructor(private readonly http: HttpClient) {}\n\n  list(): Promise<WhatsappTemplate[]> {\n    return this.http.get<WhatsappTemplate[]>(\"/whatsapp/templates\");\n  }\n\n  create(input: CreateWhatsappTemplateInput): Promise<WhatsappTemplate> {\n    return this.http.post<WhatsappTemplate>(\"/whatsapp/templates\", input);\n  }\n\n  update(id: string, input: UpdateWhatsappTemplateInput): Promise<WhatsappTemplate> {\n    return this.http.put<WhatsappTemplate>(`/whatsapp/templates/${id}`, input);\n  }\n\n  sync(): Promise<SyncWhatsappTemplatesResult> {\n    return this.http.post<SyncWhatsappTemplatesResult>(\"/whatsapp/templates/sync\");\n  }\n\n  delete(id: string): Promise<void> {\n    return this.http.delete(`/whatsapp/templates/${id}`);\n  }\n}\n","import { HttpClient, type HttpClientOptions } from \"./http.js\";\nimport { DomainsResource } from \"./resources/domains.js\";\nimport { HistoryResource } from \"./resources/history.js\";\nimport { ManagedNumbersResource } from \"./resources/managed-numbers.js\";\nimport { MessagesResource } from \"./resources/messages.js\";\nimport { PlansResource } from \"./resources/plans.js\";\nimport { SmtpResource } from \"./resources/smtp.js\";\nimport { StatisticsResource } from \"./resources/statistics.js\";\nimport { TemplatesResource } from \"./resources/templates.js\";\nimport { WebhooksResource } from \"./resources/webhooks.js\";\nimport { WhatsappCallsResource } from \"./resources/whatsapp-calls.js\";\nimport { WhatsappNumbersResource } from \"./resources/whatsapp-numbers.js\";\nimport { WhatsappTemplatesResource } from \"./resources/whatsapp-templates.js\";\n\nexport interface PostClientOptions\n  extends Omit<HttpClientOptions, \"baseUrl\"> {\n  baseUrl?: string;\n}\n\nexport class PostClient {\n  private readonly http: HttpClient;\n\n  readonly messages: MessagesResource;\n  readonly templates: TemplatesResource;\n  readonly whatsappTemplates: WhatsappTemplatesResource;\n  readonly whatsappNumbers: WhatsappNumbersResource;\n  readonly calls: WhatsappCallsResource;\n  readonly domains: DomainsResource;\n  readonly webhooks: WebhooksResource;\n  readonly smtp: SmtpResource;\n  readonly plans: PlansResource;\n  readonly history: HistoryResource;\n  readonly statistics: StatisticsResource;\n  readonly managedNumbers: ManagedNumbersResource;\n\n  constructor(optionsOrHttp: HttpClientOptions | HttpClient) {\n    this.http = optionsOrHttp instanceof HttpClient ? optionsOrHttp : new HttpClient(optionsOrHttp);\n\n    this.messages = new MessagesResource(this.http);\n    this.templates = new TemplatesResource(this.http);\n    this.whatsappTemplates = new WhatsappTemplatesResource(this.http);\n    this.whatsappNumbers = new WhatsappNumbersResource(this.http);\n    this.calls = new WhatsappCallsResource(this.http);\n    this.domains = new DomainsResource(this.http);\n    this.webhooks = new WebhooksResource(this.http);\n    this.smtp = new SmtpResource(this.http);\n    this.plans = new PlansResource(this.http);\n    this.history = new HistoryResource(this.http);\n    this.statistics = new StatisticsResource(this.http);\n    this.managedNumbers = new ManagedNumbersResource(this.http);\n  }\n}\n","import type { FastifyBaseLogger, FastifyInstance, FastifyPluginAsync, FastifyRequest } from \"fastify\";\nimport fp from \"fastify-plugin\";\nimport { PostClient } from \"./client.js\";\nimport { HttpClient } from \"./http.js\";\n\nexport interface ServiceAccountOptions {\n  issuerUrl: string;\n  clientId: string;\n  clientSecret: string;\n}\n\nexport interface PostPluginOptions {\n  serviceAccount: ServiceAccountOptions;\n  baseUrl?: string;\n  logLevel?: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\" | \"silent\";\n}\n\ninterface CachedToken {\n  value: string;\n  expiresAt: number;\n  organizationId: string | undefined;\n}\n\ntype Logger = Pick<FastifyBaseLogger, \"debug\" | \"info\" | \"warn\" | \"error\">;\n\nfunction log(logger: Logger, msg: string, data?: Record<string, unknown>) {\n  if (data) {\n    process.stdout.write(`[geekapps-post] ${msg} ${JSON.stringify(data, null, 2)}\\n`);\n  } else {\n    process.stdout.write(`[geekapps-post] ${msg}\\n`);\n  }\n}\n\nfunction decodeJwtPayload(token: string): Record<string, unknown> {\n  try {\n    const [, payload] = token.split(\".\");\n    if (!payload) return {};\n    const json = Buffer.from(payload, \"base64url\").toString(\"utf-8\");\n    return JSON.parse(json) as Record<string, unknown>;\n  } catch {\n    return {};\n  }\n}\n\nclass TokenProvider {\n  private readonly issuerUrl: string;\n  private readonly clientId: string;\n  private readonly clientSecret: string;\n  private readonly logger: Logger;\n  private cached: CachedToken | null = null;\n  private inflight: Promise<CachedToken> | null = null;\n\n  constructor(options: PostPluginOptions, logger: Logger) {\n    this.issuerUrl = options.serviceAccount.issuerUrl.replace(/\\/$/, \"\");\n    this.clientId = options.serviceAccount.clientId;\n    this.clientSecret = options.serviceAccount.clientSecret;\n    this.logger = logger;\n  }\n\n  private async ensureFresh(): Promise<CachedToken> {\n    const now = Date.now();\n    if (this.cached && this.cached.expiresAt - now > 30_000) {\n      log(this.logger, \"service account token cache hit\", {\n        expiresAt: new Date(this.cached.expiresAt).toISOString(),\n      });\n      return this.cached;\n    }\n    log(this.logger, \"service account token cache miss — fetching new token\");\n    if (this.inflight) return this.inflight;\n    this.inflight = this.fetchToken().finally(() => { this.inflight = null; });\n    return this.inflight;\n  }\n\n  getToken(): Promise<string> {\n    return this.ensureFresh().then((c) => c.value);\n  }\n\n  getOrganizationId(): Promise<string | undefined> {\n    return this.ensureFresh().then((c) => c.organizationId);\n  }\n\n  private async fetchToken(): Promise<CachedToken> {\n    log(this.logger, \"fetching service account token\", {\n      url: `${this.issuerUrl}/auth/token`,\n      clientId: this.clientId,\n    });\n\n    const credentials = Buffer.from(`${this.clientId}:${this.clientSecret}`).toString(\"base64\");\n    const res = await fetch(`${this.issuerUrl}/auth/token`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Basic ${credentials}`,\n      },\n      body: JSON.stringify({ grant_type: \"service_account\" }),\n    });\n\n    if (!res.ok) {\n      const err = await res.json().catch(() => ({})) as { error?: string };\n      const msg = `auth failed (${res.status}): ${err.error ?? \"unknown error\"}`;\n      log(this.logger, msg);\n      throw new Error(`[geekapps-post] ${msg}`);\n    }\n\n    const data = await res.json() as { access_token: string; expires_in?: number };\n    const claims = decodeJwtPayload(data.access_token);\n    const organizationId =\n      typeof claims.organizationId === \"string\" ? claims.organizationId :\n      typeof claims.organization_id === \"string\" ? claims.organization_id :\n      undefined;\n\n    this.cached = {\n      value: data.access_token,\n      expiresAt: Date.now() + (data.expires_in ?? 420) * 1000,\n      organizationId,\n    };\n\n    log(this.logger, \"service account token acquired\", {\n      claims: { organizationId },\n      expiresIn: `${data.expires_in ?? 420}s`,\n    });\n\n    return this.cached;\n  }\n}\n\nexport class LoggingHttpClient extends HttpClient {\n  private readonly logger: Logger;\n  private readonly baseUrlLog: string;\n\n  constructor(options: ConstructorParameters<typeof HttpClient>[0], logger: Logger) {\n    super(options);\n    this.logger = logger;\n    this.baseUrlLog = options.baseUrl.replace(/\\/$/, \"\");\n  }\n\n  override async request<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n    const url = `${this.baseUrlLog}/v1${path}`;\n    log(this.logger, \"api request\", { method, url });\n    if (body !== undefined) {\n      log(this.logger, \"api request body\", { body });\n    }\n    try {\n      const result = await super.request<T>(method, path, body);\n      log(this.logger, \"api response\", { method, url, status: 200 });\n      return result;\n    } catch (err) {\n      const status = (err as { status?: number }).status;\n      log(this.logger, \"api response error\", { method, url, status });\n      throw err;\n    }\n  }\n}\n\ndeclare module \"fastify\" {\n  interface FastifyInstance {\n    postClient: PostClient;\n  }\n  interface FastifyRequest {\n    postClient: PostClient;\n  }\n}\n\nconst postPlugin: FastifyPluginAsync<PostPluginOptions> = async (\n  fastify: FastifyInstance,\n  options: PostPluginOptions,\n) => {\n  const logger = options.logLevel\n    ? fastify.log.child({ level: options.logLevel })\n    : fastify.log;\n\n  const baseUrl = options.baseUrl ?? \"https://post-api.geekapps.com.br\";\n  const provider = new TokenProvider(options, logger);\n\n  log(logger, \"geekapps post initialized\", {\n    issuerUrl: options.serviceAccount.issuerUrl,\n    baseUrl,\n    serviceAccount: true,\n  });\n\n  const http = new LoggingHttpClient(\n    {\n      baseUrl,\n      token: () => provider.getToken(),\n      organizationId: () => provider.getOrganizationId() as Promise<string>,\n    },\n    logger,\n  );\n\n  const client = new PostClient(http);\n\n  fastify.decorate(\"postClient\", client);\n\n  fastify.addHook(\"onRequest\", async (request: FastifyRequest) => {\n    request.postClient = client;\n  });\n};\n\nexport default fp(postPlugin, {\n  fastify: \">=4.0.0\",\n  name: \"@geekapps/post-fastify\",\n});\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport type { PostWebhookPayload } from \"./types.js\";\n\n/**\n * Verifies the `X-Post-Signature` header (`sha256=<hex>`) of a Post webhook.\n * `rawBody` must be the exact request body string, before JSON parsing.\n */\nexport function verifyWebhookSignature(\n  rawBody: string,\n  signatureHeader: string | null | undefined,\n  secret: string,\n): boolean {\n  if (!signatureHeader?.startsWith(\"sha256=\")) return false;\n  const expected = Buffer.from(createHmac(\"sha256\", secret).update(rawBody).digest(\"hex\"));\n  const received = Buffer.from(signatureHeader.slice(\"sha256=\".length));\n  return expected.length === received.length && timingSafeEqual(expected, received);\n}\n\n/** Verifies the signature and parses the payload; throws if invalid. */\nexport function constructWebhookEvent(\n  rawBody: string,\n  signatureHeader: string | null | undefined,\n  secret: string,\n): PostWebhookPayload {\n  if (!verifyWebhookSignature(rawBody, signatureHeader, secret)) {\n    throw new Error(\"Invalid Post webhook signature\");\n  }\n  return JSON.parse(rawBody) as PostWebhookPayload;\n}\n"],"mappings":";AAAO,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACkB,QAChB,SACgB,QAChB;AACA,UAAM,SAAS,GAAG,OAAO,KAAK,MAAM,KAAK,OAAO;AAJhC;AAEA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,IAAI,aAAa;AACf,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,cAAc;AAChB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,gBAAgB;AAClB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,oBAAoB;AACtB,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;;;ACnBO,IAAM,aAAN,MAAiB;AAAA,EAKtB,YAAY,SAA4B;AACtC,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,QAAQ,QAAQ;AACrB,SAAK,iBAAiB,QAAQ;AAAA,EAChC;AAAA,EAEA,MAAc,eAAgC;AAC5C,WAAO,OAAO,KAAK,UAAU,aAAa,MAAM,KAAK,MAAM,IAAI,KAAK;AAAA,EACtE;AAAA,EAEA,MAAc,eAA4C;AACxD,QAAI,CAAC,KAAK,eAAgB,QAAO;AACjC,WAAO,OAAO,KAAK,mBAAmB,aAClC,MAAM,KAAK,eAAe,IAC1B,KAAK;AAAA,EACX;AAAA,EAEA,MAAM,QACJ,QACA,MACA,MACY;AACZ,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,QAAQ,MAAM,KAAK,aAAa;AAEtC,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,IAAI,IAAI;AAAA,MACnD;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QACnE,GAAI,QAAQ,EAAE,qBAAqB,MAAM,IAAI,CAAC;AAAA,MAChD;AAAA,MACA,GAAI,SAAS,SAAY,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,MAE3D,OAAO;AAAA,IACT,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAI7C,YAAM,IAAI;AAAA,QACR,IAAI;AAAA,QACJ,IAAI,SAAS,QAAQ,IAAI,MAAM;AAAA,QAC/B,IAAI;AAAA,MACN;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEA,IAAO,MAAc;AACnB,WAAO,KAAK,QAAW,OAAO,IAAI;AAAA,EACpC;AAAA,EAEA,KAAQ,MAAc,MAAgB;AACpC,WAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;AAAA,EAC3C;AAAA,EAEA,IAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,QAAW,OAAO,MAAM,IAAI;AAAA,EAC1C;AAAA,EAEA,MAAS,MAAc,MAAgB;AACrC,WAAO,KAAK,QAAW,SAAS,MAAM,IAAI;AAAA,EAC5C;AAAA,EAEA,OAAiB,MAAc;AAC7B,WAAO,KAAK,QAAW,UAAU,IAAI;AAAA,EACvC;AACF;;;ACpFO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAA6B;AAC3B,WAAO,KAAK,KAAK,IAAiB,UAAU;AAAA,EAC9C;AAAA,EAEA,IAAI,IAAgC;AAClC,WAAO,KAAK,KAAK,IAAe,YAAY,EAAE,EAAE;AAAA,EAClD;AAAA,EAEA,OAAO,OAAuD;AAC5D,WAAO,KAAK,KAAK,KAAyB,YAAY,KAAK;AAAA,EAC7D;AAAA,EAEA,OAAO,IAAwD;AAC7D,WAAO,KAAK,KAAK,KAAwC,YAAY,EAAE,SAAS;AAAA,EAClF;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,YAAY,EAAE,EAAE;AAAA,EAC1C;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,QAAkE;AACrE,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,OAAQ,IAAG,IAAI,UAAU,OAAO,MAAM;AAClD,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,GAAI,IAAG,IAAI,MAAM,OAAO,EAAE;AACtC,QAAI,QAAQ,SAAS,OAAW,IAAG,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AAClE,QAAI,QAAQ,UAAU,OAAW,IAAG,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACrE,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAiC,WAAW,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACzF;AAAA,EAEA,IAAI,IAAuC;AACzC,WAAO,KAAK,KAAK,IAAsB,YAAY,EAAE,EAAE;AAAA,EACzD;AACF;;;ACDO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,gBAAqC;AACnC,WAAO,KAAK,KAAK,IAAgB,6BAA6B;AAAA,EAChE;AAAA,EAEA,OAAiC;AAC/B,WAAO,KAAK,KAAK,IAAqB,kBAAkB;AAAA,EAC1D;AAAA,EAEA,IAAI,IAAoC;AACtC,WAAO,KAAK,KAAK,IAAmB,oBAAoB,EAAE,EAAE;AAAA,EAC9D;AAAA,EAEA,UAAU,OAA4D;AACpE,WAAO,KAAK,KAAK,KAAoB,oBAAoB,KAAK;AAAA,EAChE;AAAA,EAEA,kBAAkB,IAAY,OAAwD;AACpF,WAAO,KAAK,KAAK,KAAoB,oBAAoB,EAAE,uBAAuB,KAAK;AAAA,EACzF;AAAA,EAEA,OAAO,IAAoC;AACzC,WAAO,KAAK,KAAK,KAAoB,oBAAoB,EAAE,SAAS;AAAA,EACtE;AACF;;;AC3CO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,OAAqD;AACxD,WAAO,KAAK,KAAK,KAAwB,aAAa,KAAK;AAAA,EAC7D;AACF;;;ACNO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,MAA4B;AAC1B,WAAO,KAAK,KAAK,IAAiB,QAAQ;AAAA,EAC5C;AAAA,EAEA,OAAO,OAA0C;AAC/C,WAAO,KAAK,KAAK,IAAa,UAAU,KAAK;AAAA,EAC/C;AAAA,EAEA,gBAA0C;AACxC,WAAO,KAAK,KAAK,IAAqB,kBAAkB;AAAA,EAC1D;AACF;;;ACdO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,MAA2B;AACzB,WAAO,KAAK,KAAK,IAAgB,cAAc;AAAA,EACjD;AAAA,EAEA,OAAO,OAAmD;AACxD,WAAO,KAAK,KAAK,IAAgB,gBAAgB,KAAK;AAAA,EACxD;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,KAAK,OAAO,cAAc;AAAA,EACxC;AAAA,EAEA,KAAK,IAA2D;AAC9D,WAAO,KAAK,KAAK,KAA2C,qBAAqB,EAAE,GAAG,CAAC;AAAA,EACzF;AACF;;;AClBO,IAAM,qBAAN,MAAyB;AAAA,EAC9B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,IAAI,QAAsD;AACxD,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,GAAI,IAAG,IAAI,MAAM,OAAO,EAAE;AACtC,QAAI,QAAQ,QAAS,IAAG,IAAI,WAAW,OAAO,OAAO;AACrD,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAsB,cAAc,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACjF;AACF;;;ACLO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,KAAK,QAAiF;AACpF,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,QAAQ,KAAM,IAAG,IAAI,QAAQ,OAAO,IAAI;AAC5C,QAAI,QAAQ,aAAa,OAAW,IAAG,IAAI,YAAY,OAAO,OAAO,QAAQ,CAAC;AAC9E,UAAM,QAAQ,GAAG,SAAS;AAC1B,WAAO,KAAK,KAAK,IAAuB,aAAa,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE;AAAA,EACjF;AAAA,EAEA,IAAI,IAAsC;AACxC,WAAO,KAAK,KAAK,IAAqB,cAAc,EAAE,EAAE;AAAA,EAC1D;AAAA,EAEA,OAAO,OAAsD;AAC3D,WAAO,KAAK,KAAK,KAAsB,cAAc,KAAK;AAAA,EAC5D;AAAA,EAEA,OAAO,IAAY,OAAsD;AACvE,WAAO,KAAK,KAAK,IAAqB,cAAc,EAAE,IAAI,KAAK;AAAA,EACjE;AAAA,EAEA,UAAU,IAAY,OAAiD;AACrE,WAAO,KAAK,KAAK,MAAuB,cAAc,EAAE,UAAU,KAAK;AAAA,EACzE;AAAA,EAEA,QAAQ,IAAsC;AAC5C,WAAO,KAAK,KAAK,KAAsB,cAAc,EAAE,UAAU;AAAA,EACnE;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,cAAc,EAAE,EAAE;AAAA,EAC5C;AACF;;;ACjCO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAA8B;AAC5B,WAAO,KAAK,KAAK,IAAkB,WAAW;AAAA,EAChD;AAAA,EAEA,OAAO,OAA0D;AAC/D,WAAO,KAAK,KAAK,KAA2B,aAAa,KAAK;AAAA,EAChE;AAAA,EAEA,OAAO,IAAY,OAAgD;AACjE,WAAO,KAAK,KAAK,IAAgB,aAAa,EAAE,IAAI,KAAK;AAAA,EAC3D;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,aAAa,EAAE,EAAE;AAAA,EAC3C;AAAA,EAEA,eAAe,IAAwC;AACrD,WAAO,KAAK,KAAK,IAAuB,aAAa,EAAE,aAAa;AAAA,EACtE;AAAA,EAEA,aAAa,IAAyC;AACpD,WAAO,KAAK,KAAK,KAAyB,aAAa,EAAE,gBAAgB;AAAA,EAC3E;AACF;;;ACpBO,IAAM,wBAAN,MAA4B;AAAA,EACjC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA,EAGhD,YAAY,UAA4C;AACtD,WAAO,KAAK,KAAK,IAAqB,qBAAqB,QAAQ,UAAU;AAAA,EAC/E;AAAA;AAAA,EAGA,eAAe,UAAkB,OAA6D;AAC5F,WAAO,KAAK,KAAK,IAAqB,qBAAqB,QAAQ,YAAY,KAAK;AAAA,EACtF;AAAA;AAAA,EAGA,UAAU,QAAgB,OAAmD;AAC3E,WAAO,KAAK,KAAK,KAAuB,mBAAmB,MAAM,eAAe,KAAK;AAAA,EACvF;AAAA;AAAA,EAGA,OAAO,QAAgB,OAAmD;AACxE,WAAO,KAAK,KAAK,KAAuB,mBAAmB,MAAM,WAAW,KAAK;AAAA,EACnF;AAAA;AAAA,EAGA,OAAO,QAAgB,QAAyB,CAAC,GAA8B;AAC7E,WAAO,KAAK,KAAK,KAAuB,mBAAmB,MAAM,WAAW,KAAK;AAAA,EACnF;AAAA;AAAA,EAGA,UAAU,QAAgB,QAAyB,CAAC,GAA8B;AAChF,WAAO,KAAK,KAAK,KAAuB,mBAAmB,MAAM,cAAc,KAAK;AAAA,EACtF;AAAA;AAAA,EAGA,QAAQ,OAAqD;AAC3D,WAAO,KAAK,KAAK,KAAwB,mBAAmB,KAAK;AAAA,EACnE;AAAA;AAAA,EAGA,kBAAkB,OAAyE;AACzF,WAAO,KAAK,KAAK,KAAkC,+BAA+B,KAAK;AAAA,EACzF;AAAA;AAAA,EAGA,cAAc,IAAY,eAAuD;AAC/E,WAAO,KAAK,KAAK,IAA0B,+BAA+B,IAAI,gBAAgB,EAAE,IAAI,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC,EAAG,CAAC,CAAC,EAAE;AAAA,EACtJ;AACF;;;AClDO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA,EAIhD,YAAgC;AAC9B,WAAO,KAAK,KAAK,IAAe,iBAAiB;AAAA,EACnD;AAAA,EAEA,YAAY,OAA2C;AACrD,WAAO,KAAK,KAAK,KAAc,2BAA2B,KAAK;AAAA,EACjE;AAAA,EAEA,cAAc,IAA8B;AAC1C,WAAO,KAAK,KAAK,KAAc,mBAAmB,EAAE,YAAY;AAAA,EAClE;AAAA,EAEA,eAAe,IAA2B;AACxC,WAAO,KAAK,KAAK,OAAO,mBAAmB,EAAE,EAAE;AAAA,EACjD;AAAA,EAEA,cAAc,IAAuC;AACnD,WAAO,KAAK,KAAK,IAAsB,mBAAmB,EAAE,SAAS;AAAA,EACvE;AAAA;AAAA,EAIA,cAAyC;AACvC,WAAO,KAAK,KAAK,IAAsB,mBAAmB;AAAA,EAC5D;AAAA,EAEA,cAAc,OAA4D;AACxE,WAAO,KAAK,KAAK,KAAqB,6BAA6B,KAAK;AAAA,EAC1E;AAAA,EAEA,eAAe,OAA6D;AAC1E,WAAO,KAAK,KAAK,KAAqB,qBAAqB,KAAK;AAAA,EAClE;AAAA,EAEA,WAAW,IAAY,MAAuC;AAC5D,WAAO,KAAK,KAAK,KAAqB,qBAAqB,EAAE,gBAAgB,EAAE,KAAK,CAAC;AAAA,EACvF;AAAA,EAEA,WAAW,IAA2B;AACpC,WAAO,KAAK,KAAK,KAAK,qBAAqB,EAAE,cAAc;AAAA,EAC7D;AAAA,EAEA,WAAW,IAA4C;AACrD,WAAO,KAAK,KAAK,IAA2B,qBAAqB,EAAE,UAAU;AAAA,EAC/E;AAAA,EAEA,cAAc,IAAY,OAAmE;AAC3F,WAAO,KAAK,KAAK,MAA6B,qBAAqB,EAAE,YAAY,KAAK;AAAA,EACxF;AAAA,EAEA,kBAAkB,IAAY,aAA8C;AAC1E,WAAO,KAAK,KAAK,MAAsB,qBAAqB,EAAE,IAAI,EAAE,YAAY,CAAC;AAAA,EACnF;AAAA,EAEA,UAAU,IAA8C;AACtD,WAAO,KAAK,KAAK,IAA6B,qBAAqB,EAAE,SAAS;AAAA,EAChF;AAAA,EAEA,iBAA4C;AAC1C,WAAO,KAAK,KAAK,KAAuB,2BAA2B;AAAA,EACrE;AAAA,EAEA,aAAa,IAA2B;AACtC,WAAO,KAAK,KAAK,OAAO,qBAAqB,EAAE,EAAE;AAAA,EACnD;AACF;;;AC3EO,IAAM,4BAAN,MAAgC;AAAA,EACrC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA,EAEhD,OAAoC;AAClC,WAAO,KAAK,KAAK,IAAwB,qBAAqB;AAAA,EAChE;AAAA,EAEA,OAAO,OAA+D;AACpE,WAAO,KAAK,KAAK,KAAuB,uBAAuB,KAAK;AAAA,EACtE;AAAA,EAEA,OAAO,IAAY,OAA+D;AAChF,WAAO,KAAK,KAAK,IAAsB,uBAAuB,EAAE,IAAI,KAAK;AAAA,EAC3E;AAAA,EAEA,OAA6C;AAC3C,WAAO,KAAK,KAAK,KAAkC,0BAA0B;AAAA,EAC/E;AAAA,EAEA,OAAO,IAA2B;AAChC,WAAO,KAAK,KAAK,OAAO,uBAAuB,EAAE,EAAE;AAAA,EACrD;AACF;;;ACXO,IAAM,aAAN,MAAiB;AAAA,EAgBtB,YAAY,eAA+C;AACzD,SAAK,OAAO,yBAAyB,aAAa,gBAAgB,IAAI,WAAW,aAAa;AAE9F,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,YAAY,IAAI,kBAAkB,KAAK,IAAI;AAChD,SAAK,oBAAoB,IAAI,0BAA0B,KAAK,IAAI;AAChE,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,QAAQ,IAAI,sBAAsB,KAAK,IAAI;AAChD,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAC5C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;AACxC,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAC5C,SAAK,aAAa,IAAI,mBAAmB,KAAK,IAAI;AAClD,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAAA,EAC5D;AACF;;;AClDA,OAAO,QAAQ;AAwBf,SAAS,IAAI,QAAgB,KAAa,MAAgC;AACxE,MAAI,MAAM;AACR,YAAQ,OAAO,MAAM,mBAAmB,GAAG,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,EAClF,OAAO;AACL,YAAQ,OAAO,MAAM,mBAAmB,GAAG;AAAA,CAAI;AAAA,EACjD;AACF;AAEA,SAAS,iBAAiB,OAAwC;AAChE,MAAI;AACF,UAAM,CAAC,EAAE,OAAO,IAAI,MAAM,MAAM,GAAG;AACnC,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,EAAE,SAAS,OAAO;AAC/D,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAQlB,YAAY,SAA4B,QAAgB;AAHxD,SAAQ,SAA6B;AACrC,SAAQ,WAAwC;AAG9C,SAAK,YAAY,QAAQ,eAAe,UAAU,QAAQ,OAAO,EAAE;AACnE,SAAK,WAAW,QAAQ,eAAe;AACvC,SAAK,eAAe,QAAQ,eAAe;AAC3C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAc,cAAoC;AAChD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,KAAK,UAAU,KAAK,OAAO,YAAY,MAAM,KAAQ;AACvD,UAAI,KAAK,QAAQ,mCAAmC;AAAA,QAClD,WAAW,IAAI,KAAK,KAAK,OAAO,SAAS,EAAE,YAAY;AAAA,MACzD,CAAC;AACD,aAAO,KAAK;AAAA,IACd;AACA,QAAI,KAAK,QAAQ,4DAAuD;AACxE,QAAI,KAAK,SAAU,QAAO,KAAK;AAC/B,SAAK,WAAW,KAAK,WAAW,EAAE,QAAQ,MAAM;AAAE,WAAK,WAAW;AAAA,IAAM,CAAC;AACzE,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAA4B;AAC1B,WAAO,KAAK,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EAC/C;AAAA,EAEA,oBAAiD;AAC/C,WAAO,KAAK,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc;AAAA,EACxD;AAAA,EAEA,MAAc,aAAmC;AAC/C,QAAI,KAAK,QAAQ,kCAAkC;AAAA,MACjD,KAAK,GAAG,KAAK,SAAS;AAAA,MACtB,UAAU,KAAK;AAAA,IACjB,CAAC;AAED,UAAM,cAAc,OAAO,KAAK,GAAG,KAAK,QAAQ,IAAI,KAAK,YAAY,EAAE,EAAE,SAAS,QAAQ;AAC1F,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,SAAS,eAAe;AAAA,MACtD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,SAAS,WAAW;AAAA,MACrC;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,YAAY,kBAAkB,CAAC;AAAA,IACxD,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC7C,YAAM,MAAM,gBAAgB,IAAI,MAAM,MAAM,IAAI,SAAS,eAAe;AACxE,UAAI,KAAK,QAAQ,GAAG;AACpB,YAAM,IAAI,MAAM,mBAAmB,GAAG,EAAE;AAAA,IAC1C;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,KAAK,YAAY;AACjD,UAAM,iBACJ,OAAO,OAAO,mBAAmB,WAAW,OAAO,iBACnD,OAAO,OAAO,oBAAoB,WAAW,OAAO,kBACpD;AAEF,SAAK,SAAS;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,WAAW,KAAK,IAAI,KAAK,KAAK,cAAc,OAAO;AAAA,MACnD;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,kCAAkC;AAAA,MACjD,QAAQ,EAAE,eAAe;AAAA,MACzB,WAAW,GAAG,KAAK,cAAc,GAAG;AAAA,IACtC,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,WAAW;AAAA,EAIhD,YAAY,SAAsD,QAAgB;AAChF,UAAM,OAAO;AACb,SAAK,SAAS;AACd,SAAK,aAAa,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACrD;AAAA,EAEA,MAAe,QAAqB,QAAgB,MAAc,MAA4B;AAC5F,UAAM,MAAM,GAAG,KAAK,UAAU,MAAM,IAAI;AACxC,QAAI,KAAK,QAAQ,eAAe,EAAE,QAAQ,IAAI,CAAC;AAC/C,QAAI,SAAS,QAAW;AACtB,UAAI,KAAK,QAAQ,oBAAoB,EAAE,KAAK,CAAC;AAAA,IAC/C;AACA,QAAI;AACF,YAAM,SAAS,MAAM,MAAM,QAAW,QAAQ,MAAM,IAAI;AACxD,UAAI,KAAK,QAAQ,gBAAgB,EAAE,QAAQ,KAAK,QAAQ,IAAI,CAAC;AAC7D,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,YAAM,SAAU,IAA4B;AAC5C,UAAI,KAAK,QAAQ,sBAAsB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAC9D,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAWA,IAAM,aAAoD,OACxD,SACA,YACG;AACH,QAAM,SAAS,QAAQ,WACnB,QAAQ,IAAI,MAAM,EAAE,OAAO,QAAQ,SAAS,CAAC,IAC7C,QAAQ;AAEZ,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,IAAI,cAAc,SAAS,MAAM;AAElD,MAAI,QAAQ,6BAA6B;AAAA,IACvC,WAAW,QAAQ,eAAe;AAAA,IAClC;AAAA,IACA,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,OAAO,IAAI;AAAA,IACf;AAAA,MACE;AAAA,MACA,OAAO,MAAM,SAAS,SAAS;AAAA,MAC/B,gBAAgB,MAAM,SAAS,kBAAkB;AAAA,IACnD;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,WAAW,IAAI;AAElC,UAAQ,SAAS,cAAc,MAAM;AAErC,UAAQ,QAAQ,aAAa,OAAO,YAA4B;AAC9D,YAAQ,aAAa;AAAA,EACvB,CAAC;AACH;AAEA,IAAO,iBAAQ,GAAG,YAAY;AAAA,EAC5B,SAAS;AAAA,EACT,MAAM;AACR,CAAC;;;ACzMD,SAAS,YAAY,uBAAuB;AAOrC,SAAS,uBACd,SACA,iBACA,QACS;AACT,MAAI,CAAC,iBAAiB,WAAW,SAAS,EAAG,QAAO;AACpD,QAAM,WAAW,OAAO,KAAK,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AACvF,QAAM,WAAW,OAAO,KAAK,gBAAgB,MAAM,UAAU,MAAM,CAAC;AACpE,SAAO,SAAS,WAAW,SAAS,UAAU,gBAAgB,UAAU,QAAQ;AAClF;AAGO,SAAS,sBACd,SACA,iBACA,QACoB;AACpB,MAAI,CAAC,uBAAuB,SAAS,iBAAiB,MAAM,GAAG;AAC7D,UAAM,IAAI,MAAM,gCAAgC;AAAA,EAClD;AACA,SAAO,KAAK,MAAM,OAAO;AAC3B;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekapps/post-fastify",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Geekapps Post SDK for Fastify",
   "type": "module",
   "main": "./dist/index.js",

package/src/client.ts

@@ -8,6 +8,7 @@ import { SmtpResource } from "./resources/smtp.js";
 import { StatisticsResource } from "./resources/statistics.js";
 import { TemplatesResource } from "./resources/templates.js";
 import { WebhooksResource } from "./resources/webhooks.js";
+import { WhatsappCallsResource } from "./resources/whatsapp-calls.js";
 import { WhatsappNumbersResource } from "./resources/whatsapp-numbers.js";
 import { WhatsappTemplatesResource } from "./resources/whatsapp-templates.js";
 
@@ -23,6 +24,7 @@ export class PostClient {
   readonly templates: TemplatesResource;
   readonly whatsappTemplates: WhatsappTemplatesResource;
   readonly whatsappNumbers: WhatsappNumbersResource;
+  readonly calls: WhatsappCallsResource;
   readonly domains: DomainsResource;
   readonly webhooks: WebhooksResource;
   readonly smtp: SmtpResource;
@@ -38,6 +40,7 @@ export class PostClient {
     this.templates = new TemplatesResource(this.http);
     this.whatsappTemplates = new WhatsappTemplatesResource(this.http);
     this.whatsappNumbers = new WhatsappNumbersResource(this.http);
+    this.calls = new WhatsappCallsResource(this.http);
     this.domains = new DomainsResource(this.http);
     this.webhooks = new WebhooksResource(this.http);
     this.smtp = new SmtpResource(this.http);

package/src/http.ts

@@ -1,88 +1,88 @@
-import { PostApiError } from "./errors.js";
-
-export type TokenResolver = string | (() => string | Promise<string>);
-
-export interface HttpClientOptions {
-  baseUrl: string;
-  token: TokenResolver;
-  organizationId?: string | (() => string | Promise<string>);
-}
-
-export class HttpClient {
-  private readonly baseUrl: string;
-  private readonly token: TokenResolver;
-  private readonly organizationId?: string | (() => string | Promise<string>);
-
-  constructor(options: HttpClientOptions) {
-    this.baseUrl = options.baseUrl.replace(/\/$/, "");
-    this.token = options.token;
-    this.organizationId = options.organizationId;
-  }
-
-  private async resolveToken(): Promise<string> {
-    return typeof this.token === "function" ? await this.token() : this.token;
-  }
-
-  private async resolveOrgId(): Promise<string | undefined> {
-    if (!this.organizationId) return undefined;
-    return typeof this.organizationId === "function"
-      ? await this.organizationId()
-      : this.organizationId;
-  }
-
-  async request<T = unknown>(
-    method: string,
-    path: string,
-    body?: unknown,
-  ): Promise<T> {
-    const token = await this.resolveToken();
-    const orgId = await this.resolveOrgId();
-
-    const res = await fetch(`${this.baseUrl}/v1${path}`, {
-      method,
-      headers: {
-        Authorization: `Bearer ${token}`,
-        ...(body !== undefined ? { "Content-Type": "application/json" } : {}),
-        ...(orgId ? { "X-Organization-Id": orgId } : {}),
-      },
-      ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      cache: "no-store" as any,
-    });
-
-    if (!res.ok) {
-      const err = await res.json().catch(() => ({})) as {
-        error?: string;
-        detail?: string;
-      };
-      throw new PostApiError(
-        res.status,
-        err.error ?? `HTTP ${res.status}`,
-        err.detail,
-      );
-    }
-
-    if (res.status === 204) return undefined as T;
-    return res.json() as Promise<T>;
-  }
-
-  get<T>(path: string) {
-    return this.request<T>("GET", path);
-  }
-
-  post<T>(path: string, body?: unknown) {
-    return this.request<T>("POST", path, body);
-  }
-
-  put<T>(path: string, body?: unknown) {
-    return this.request<T>("PUT", path, body);
-  }
-
-  patch<T>(path: string, body?: unknown) {
-    return this.request<T>("PATCH", path, body);
-  }
-
-  delete<T = void>(path: string) {
-    return this.request<T>("DELETE", path);
-  }
-}
+import { PostApiError } from "./errors.js";
+
+export type TokenResolver = string | (() => string | Promise<string>);
+
+export interface HttpClientOptions {
+  baseUrl: string;
+  token: TokenResolver;
+  organizationId?: string | (() => string | Promise<string>);
+}
+
+export class HttpClient {
+  private readonly baseUrl: string;
+  private readonly token: TokenResolver;
+  private readonly organizationId?: string | (() => string | Promise<string>);
+
+  constructor(options: HttpClientOptions) {
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.token = options.token;
+    this.organizationId = options.organizationId;
+  }
+
+  private async resolveToken(): Promise<string> {
+    return typeof this.token === "function" ? await this.token() : this.token;
+  }
+
+  private async resolveOrgId(): Promise<string | undefined> {
+    if (!this.organizationId) return undefined;
+    return typeof this.organizationId === "function"
+      ? await this.organizationId()
+      : this.organizationId;
+  }
+
+  async request<T = unknown>(
+    method: string,
+    path: string,
+    body?: unknown,
+  ): Promise<T> {
+    const token = await this.resolveToken();
+    const orgId = await this.resolveOrgId();
+
+    const res = await fetch(`${this.baseUrl}/v1${path}`, {
+      method,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        ...(body !== undefined ? { "Content-Type": "application/json" } : {}),
+        ...(orgId ? { "X-Organization-Id": orgId } : {}),
+      },
+      ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      cache: "no-store" as any,
+    });
+
+    if (!res.ok) {
+      const err = await res.json().catch(() => ({})) as {
+        error?: string;
+        detail?: string;
+      };
+      throw new PostApiError(
+        res.status,
+        err.error ?? `HTTP ${res.status}`,
+        err.detail,
+      );
+    }
+
+    if (res.status === 204) return undefined as T;
+    return res.json() as Promise<T>;
+  }
+
+  get<T>(path: string) {
+    return this.request<T>("GET", path);
+  }
+
+  post<T>(path: string, body?: unknown) {
+    return this.request<T>("POST", path, body);
+  }
+
+  put<T>(path: string, body?: unknown) {
+    return this.request<T>("PUT", path, body);
+  }
+
+  patch<T>(path: string, body?: unknown) {
+    return this.request<T>("PATCH", path, body);
+  }
+
+  delete<T = void>(path: string) {
+    return this.request<T>("DELETE", path);
+  }
+}

package/src/index.ts

@@ -12,10 +12,29 @@ export { SmtpResource } from "./resources/smtp.js";
 export { StatisticsResource } from "./resources/statistics.js";
 export { TemplatesResource } from "./resources/templates.js";
 export { WebhooksResource } from "./resources/webhooks.js";
+export { WhatsappCallsResource } from "./resources/whatsapp-calls.js";
 export { WhatsappNumbersResource } from "./resources/whatsapp-numbers.js";
+export { constructWebhookEvent, verifyWebhookSignature } from "./webhook.js";
 export { WhatsappTemplatesResource } from "./resources/whatsapp-templates.js";
 
 export type {
+  CallActionResult,
+  CallAnswerInput,
+  CallConnectWebhookData,
+  CallPermissionStatus,
+  CallStatusWebhookData,
+  CallTargetInput,
+  CallTerminateWebhookData,
+  CallingSettings,
+  CallingStatus,
+  ConnectCallInput,
+  ConnectCallResult,
+  MessageReceivedWebhookData,
+  PostWebhookPayload,
+  RequestCallPermissionInput,
+  RequestCallPermissionResult,
+  UpdateCallingSettingsInput,
+  WebhookSdpSession,
   AreaCode,
   AvailablePlan,
   ConnectWabaInput,

package/src/resources/whatsapp-calls.ts

@@ -0,0 +1,64 @@
+import type { HttpClient } from "../http.js";
+import type {
+  CallActionResult,
+  CallAnswerInput,
+  CallPermissionStatus,
+  CallTargetInput,
+  CallingSettings,
+  ConnectCallInput,
+  ConnectCallResult,
+  RequestCallPermissionInput,
+  RequestCallPermissionResult,
+  UpdateCallingSettingsInput,
+} from "../types.js";
+
+// WhatsApp Cloud API Calling. Signaling only: media flows over WebRTC between
+// Meta and your server. Incoming calls arrive via the `call_connect` webhook.
+export class WhatsappCallsResource {
+  constructor(private readonly http: HttpClient) {}
+
+  /** Lê a configuração de chamadas de um número (id do WhatsappNumber no Post). */
+  getSettings(numberId: string): Promise<CallingSettings> {
+    return this.http.get<CallingSettings>(`/whatsapp/numbers/${numberId}/calling`);
+  }
+
+  /** Ativa/desativa chamadas no número. */
+  updateSettings(numberId: string, input: UpdateCallingSettingsInput): Promise<CallingSettings> {
+    return this.http.put<CallingSettings>(`/whatsapp/numbers/${numberId}/calling`, input);
+  }
+
+  /** Pré-aceita uma chamada recebida (opcional, acelera a conexão de mídia). */
+  preAccept(callId: string, input: CallAnswerInput): Promise<CallActionResult> {
+    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/pre-accept`, input);
+  }
+
+  /** Aceita uma chamada recebida enviando o SDP de resposta. */
+  accept(callId: string, input: CallAnswerInput): Promise<CallActionResult> {
+    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/accept`, input);
+  }
+
+  /** Rejeita uma chamada recebida. */
+  reject(callId: string, input: CallTargetInput = {}): Promise<CallActionResult> {
+    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/reject`, input);
+  }
+
+  /** Encerra uma chamada em andamento. */
+  terminate(callId: string, input: CallTargetInput = {}): Promise<CallActionResult> {
+    return this.http.post<CallActionResult>(`/whatsapp/calls/${callId}/terminate`, input);
+  }
+
+  /** Inicia uma chamada (business-initiated). Exige permissão prévia do usuário. */
+  connect(input: ConnectCallInput): Promise<ConnectCallResult> {
+    return this.http.post<ConnectCallResult>("/whatsapp/calls", input);
+  }
+
+  /** Envia ao usuário o pedido de permissão para receber chamadas. */
+  requestPermission(input: RequestCallPermissionInput): Promise<RequestCallPermissionResult> {
+    return this.http.post<RequestCallPermissionResult>("/whatsapp/calls/permissions", input);
+  }
+
+  /** Consulta o status de permissão de chamada de um usuário. */
+  getPermission(to: string, phoneNumberId?: string): Promise<CallPermissionStatus> {
+    return this.http.get<CallPermissionStatus>(`/whatsapp/calls/permissions?${new URLSearchParams({ to, ...(phoneNumberId ? { phoneNumberId } : {}) })}`);
+  }
+}

package/src/types.ts

@@ -32,7 +32,12 @@ export type WebhookEvent =
   | "message_failed"
   | "message_bounced"
   | "message_opened"
-  | "message_clicked";
+  | "message_clicked"
+  | "message_received"
+  | "call_connect"
+  | "call_terminate"
+  | "call_status"
+  | "call_permission_reply";
 
 export type WabaStatus = "active" | "token_expired" | "disconnected";
 
@@ -240,7 +245,7 @@ export interface AreaCode {
 // ─── Request types ────────────────────────────────────────────────────────────
 
 export interface TemplateVariable {
-  name: string;
+  name?: string;
   value: string;
 }
 
@@ -428,3 +433,117 @@ export interface WabaHealthResult {
 export interface PhoneNumberStatusResult {
   status: unknown;
 }
+
+// ─── WhatsApp Calling ─────────────────────────────────────────────────────────
+
+export type CallingStatus = "ENABLED" | "DISABLED";
+
+export interface CallingSettings {
+  status: CallingStatus;
+  callIconVisibility?: "DEFAULT" | "DISABLE_ALL" | null;
+  callbackPermissionStatus?: CallingStatus | null;
+}
+
+export interface UpdateCallingSettingsInput {
+  status: CallingStatus;
+  callIconVisibility?: "DEFAULT" | "DISABLE_ALL";
+  callbackPermissionStatus?: CallingStatus;
+}
+
+/** Meta phone_number_id (as received in webhooks). Defaults to the org's first active number. */
+export interface CallTargetInput {
+  phoneNumberId?: string;
+}
+
+export interface CallAnswerInput extends CallTargetInput {
+  /** SDP answer to the offer received in `call_connect`. */
+  sdp: string;
+  bizOpaqueCallbackData?: string;
+}
+
+export interface CallActionResult {
+  ok: true;
+  callId: string;
+  action: "pre_accept" | "accept" | "reject" | "terminate";
+}
+
+export interface ConnectCallInput extends CallTargetInput {
+  to: string;
+  /** SDP offer. The answer arrives in the `call_connect` webhook. */
+  sdp: string;
+  bizOpaqueCallbackData?: string;
+}
+
+export interface ConnectCallResult {
+  callId: string;
+  phoneNumberId: string;
+}
+
+export interface RequestCallPermissionInput extends CallTargetInput {
+  to: string;
+  body?: string;
+}
+
+export interface RequestCallPermissionResult {
+  messageId: string;
+  phoneNumberId: string;
+}
+
+/** Raw Meta response from GET /{phone-number-id}/call_permissions. */
+export type CallPermissionStatus = Record<string, unknown>;
+
+export interface WebhookSdpSession {
+  sdp_type: "offer" | "answer";
+  sdp: string;
+}
+
+interface CallWebhookBase {
+  phoneNumberId: string;
+  displayPhoneNumber: string | null;
+  callId: string;
+  timestamp: string;
+  bizOpaqueCallbackData: string | null;
+}
+
+export interface CallConnectWebhookData extends CallWebhookBase {
+  from: string;
+  to: string;
+  contactName: string | null;
+  direction: "USER_INITIATED" | "BUSINESS_INITIATED" | null;
+  session: WebhookSdpSession | null;
+}
+
+export interface CallTerminateWebhookData extends CallWebhookBase {
+  from: string;
+  to: string;
+  direction: "USER_INITIATED" | "BUSINESS_INITIATED" | null;
+  status: string | null;
+  startTime: string | null;
+  endTime: string | null;
+  duration: number | null;
+}
+
+export interface CallStatusWebhookData extends CallWebhookBase {
+  status: string;
+  recipientId: string | null;
+}
+
+export interface MessageReceivedWebhookData {
+  phoneNumberId: string;
+  displayPhoneNumber: string | null;
+  channel: "whatsapp";
+  messageId: string;
+  from: string;
+  contactName: string | null;
+  type: string;
+  timestamp: string;
+  /** Raw Meta message object. */
+  message: Record<string, unknown>;
+}
+
+export type PostWebhookPayload =
+  | { event: "call_connect"; data: CallConnectWebhookData; timestamp: number }
+  | { event: "call_terminate"; data: CallTerminateWebhookData; timestamp: number }
+  | { event: "call_status"; data: CallStatusWebhookData; timestamp: number }
+  | { event: "message_received" | "call_permission_reply"; data: MessageReceivedWebhookData; timestamp: number }
+  | { event: Exclude<WebhookEvent, "call_connect" | "call_terminate" | "call_status" | "message_received" | "call_permission_reply">; data: Record<string, unknown>; timestamp: number };

package/src/webhook.ts

@@ -0,0 +1,29 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import type { PostWebhookPayload } from "./types.js";
+
+/**
+ * Verifies the `X-Post-Signature` header (`sha256=<hex>`) of a Post webhook.
+ * `rawBody` must be the exact request body string, before JSON parsing.
+ */
+export function verifyWebhookSignature(
+  rawBody: string,
+  signatureHeader: string | null | undefined,
+  secret: string,
+): boolean {
+  if (!signatureHeader?.startsWith("sha256=")) return false;
+  const expected = Buffer.from(createHmac("sha256", secret).update(rawBody).digest("hex"));
+  const received = Buffer.from(signatureHeader.slice("sha256=".length));
+  return expected.length === received.length && timingSafeEqual(expected, received);
+}
+
+/** Verifies the signature and parses the payload; throws if invalid. */
+export function constructWebhookEvent(
+  rawBody: string,
+  signatureHeader: string | null | undefined,
+  secret: string,
+): PostWebhookPayload {
+  if (!verifyWebhookSignature(rawBody, signatureHeader, secret)) {
+    throw new Error("Invalid Post webhook signature");
+  }
+  return JSON.parse(rawBody) as PostWebhookPayload;
+}