@hed-hog/core 0.0.349 → 0.0.350

package/src/webhook-integration/webhook-integration.service.ts

@@ -1,735 +1,934 @@
-import { DeleteDTO } from '@hed-hog/api';
-import { MailService as MailMainService } from '@hed-hog/api-mail';
-import { PaginationDTO, PaginationService } from '@hed-hog/api-pagination';
-import { PrismaService } from '@hed-hog/api-prisma';
-import { HttpService } from '@nestjs/axios';
-import {
-  BadRequestException,
-  Injectable,
-  NotFoundException,
-} from '@nestjs/common';
-import { Request } from 'express';
-import { firstValueFrom } from 'rxjs';
-import { MailService } from '../mail/mail.service';
-import { SettingService } from '../setting/setting.service';
-import {
-  createPlainToken,
-  createPublicUuid,
-  hashToken,
-  normalizeJsonObject,
-  renderTemplate,
-  summarizePayload,
-} from './webhook-utils';
-
-@Injectable()
-export class WebhookIntegrationService {
-  constructor(
-    private readonly prisma: PrismaService,
-    private readonly pagination: PaginationService,
-    private readonly http: HttpService,
-    private readonly mailMainService: MailMainService,
-    private readonly coreMailService: MailService,
-    private readonly settingService: SettingService,
-  ) {}
-
-  private get integrations() {
-    return (this.prisma as any).webhook_integration;
-  }
-
-  private get actions() {
-    return (this.prisma as any).webhook_action;
-  }
-
-  private get logs() {
-    return (this.prisma as any).webhook_call_log;
-  }
-
-  async list(paginationParams: PaginationDTO) {
-    const fields = ['slug', 'name', 'description', 'public_uuid', 'status'];
-    const OR = this.prisma.createInsensitiveSearch(fields, paginationParams);
-
-    const result = await this.pagination.paginate(
-      this.integrations,
-      paginationParams,
-      {
-        where: OR.length > 0 ? { OR } : {},
-        include: {
-          webhook_action: {
-            orderBy: [{ order: 'asc' }, { id: 'asc' }],
-          },
-        },
-        orderBy: [{ updated_at: 'desc' }, { id: 'desc' }],
-      },
-    );
-
-    return {
-      ...result,
-      data: await this.withPublicUrls(result.data || []),
-    };
-  }
-
-  async get(id: number) {
-    const record = await this.integrations.findUnique({
-      where: { id },
-      include: {
-        webhook_action: {
-          orderBy: [{ order: 'asc' }, { id: 'asc' }],
-        },
-      },
-    });
-
-    if (!record) {
-      throw new NotFoundException(
-        `Webhook integration with id ${id} not found.`,
-      );
-    }
-
-    return this.withPublicUrl(record);
-  }
-
-  async create(data: any) {
-    await this.ensureSlugAvailable(data.slug);
-
-    let plainToken: string | null = null;
-    if (data.require_token) {
-      plainToken = createPlainToken();
-    }
-
-    const record = await this.integrations.create({
-      data: {
-        ...this.normalizeIntegration(data),
-        public_uuid: createPublicUuid(),
-        token_hash: plainToken ? hashToken(plainToken) : null,
-      },
-    });
-
-    return {
-      ...(await this.withPublicUrl(record)),
-      plainToken,
-    };
-  }
-
-  async update(id: number, data: any) {
-    const existing = await this.get(id);
-    if (data.slug && data.slug !== existing.slug) {
-      await this.ensureSlugAvailable(data.slug);
-    }
-
-    let plainToken: string | null = null;
-    const updateData = this.normalizeIntegration(data, true);
-    if (data.require_token === false) {
-      updateData.token_hash = null;
-    } else if (data.require_token === true && !existing.token_hash) {
-      plainToken = createPlainToken();
-      updateData.token_hash = hashToken(plainToken);
-    }
-
-    const record = await this.integrations.update({
-      where: { id },
-      data: updateData,
-    });
-
-    return {
-      ...(await this.withPublicUrl(record)),
-      plainToken,
-    };
-  }
-
-  async delete(data: DeleteDTO) {
-    if (!data.ids?.length) {
-      throw new BadRequestException(
-        'You must select at least one item to delete.',
-      );
-    }
-
-    return this.integrations.deleteMany({
-      where: { id: { in: data.ids } },
-    });
-  }
-
-  async regenerateUuid(id: number) {
-    await this.get(id);
-    const record = await this.integrations.update({
-      where: { id },
-      data: { public_uuid: createPublicUuid() },
-    });
-
-    return this.withPublicUrl(record);
-  }
-
-  async regenerateToken(id: number) {
-    await this.get(id);
-    const plainToken = createPlainToken();
-    const record = await this.integrations.update({
-      where: { id },
-      data: {
-        require_token: true,
-        token_hash: hashToken(plainToken),
-      },
-    });
-
-    return {
-      ...(await this.withPublicUrl(record)),
-      plainToken,
-    };
-  }
-
-  private async getApplicationBaseUrl() {
-    const settings = await this.settingService.getSettingValues('url');
-    const value = settings?.url;
-    return typeof value === 'string' ? value.replace(/\/+$/, '') : '';
-  }
-
-  private async withPublicUrl<T extends { public_uuid?: string | null }>(
-    record: T,
-  ) {
-    const baseUrl = await this.getApplicationBaseUrl();
-    return {
-      ...record,
-      public_url:
-        baseUrl && record.public_uuid
-          ? `${baseUrl}/webhook/${record.public_uuid}`
-          : null,
-    };
-  }
-
-  private async withPublicUrls<T extends { public_uuid?: string | null }>(
-    records: T[],
-  ) {
-    const baseUrl = await this.getApplicationBaseUrl();
-    return records.map((record) => ({
-      ...record,
-      public_url:
-        baseUrl && record.public_uuid
-          ? `${baseUrl}/webhook/${record.public_uuid}`
-          : null,
-    }));
-  }
-
-  async listActions(integrationId: number) {
-    await this.get(integrationId);
-    return this.actions.findMany({
-      where: { webhook_integration_id: integrationId },
-      orderBy: [{ order: 'asc' }, { id: 'asc' }],
-    });
-  }
-
-  async createAction(integrationId: number, data: any) {
-    await this.get(integrationId);
-    return this.actions.create({
-      data: {
-        ...this.normalizeAction(data),
-        webhook_integration_id: integrationId,
-      },
-    });
-  }
-
-  async updateAction(integrationId: number, actionId: number, data: any) {
-    await this.ensureAction(integrationId, actionId);
-    return this.actions.update({
-      where: { id: actionId },
-      data: this.normalizeAction(data, true),
-    });
-  }
-
-  async deleteActions(integrationId: number, data: DeleteDTO) {
-    await this.get(integrationId);
-    if (!data.ids?.length) {
-      throw new BadRequestException(
-        'You must select at least one item to delete.',
-      );
-    }
-
-    return this.actions.deleteMany({
-      where: {
-        webhook_integration_id: integrationId,
-        id: { in: data.ids },
-      },
-    });
-  }
-
-  async listLogs(integrationId: number, paginationParams: PaginationDTO) {
-    await this.get(integrationId);
-    return this.pagination.paginate(this.logs, paginationParams, {
-      where: { webhook_integration_id: integrationId },
-      orderBy: [{ created_at: 'desc' }, { id: 'desc' }],
-    });
-  }
-
-  async executePublic(uuid: string, body: any, headers: any, req: Request) {
-    const startedAt = Date.now();
-    const remoteIp = this.getRemoteIp(req);
-    let integration: any | null = null;
-
-    try {
-      integration = await this.integrations.findUnique({
-        where: { public_uuid: uuid },
-        include: {
-          webhook_action: {
-            where: { status: 'active' },
-            orderBy: [{ order: 'asc' }, { id: 'asc' }],
-          },
-        },
-      });
-
-      if (!integration || integration.status !== 'active') {
-        throw new NotFoundException('Webhook not found.');
-      }
-
-      this.validateToken(integration, headers);
-      this.validateIp(integration, remoteIp);
-      this.validateBodySchema(integration, body);
-
-      const actionResults = [];
-      for (const action of integration.webhook_action || []) {
-        actionResults.push(await this.executeAction(action, body));
-      }
-
-      const response = {
-        success: true,
-        actions: actionResults,
-      };
-
-      await this.createCallLog({
-        integration,
-        uuid,
-        status: 'success',
-        remoteIp,
-        durationMs: Date.now() - startedAt,
-        payload: body,
-        response,
-      });
-
-      return response;
-    } catch (error) {
-      await this.createCallLog({
-        integration,
-        uuid,
-        status: 'failed',
-        remoteIp,
-        durationMs: Date.now() - startedAt,
-        payload: body,
-        error,
-      });
-
-      throw error;
-    }
-  }
-
-  private async executeAction(action: any, body: any) {
-    if (action.type === 'email') {
-      await this.executeEmailAction(action, body);
-      return { id: action.id, type: action.type, success: true };
-    }
-
-    if (action.type === 'whatsapp_evolution') {
-      await this.executeWhatsappAction(action, body);
-      return { id: action.id, type: action.type, success: true };
-    }
-
-    throw new BadRequestException(`Unsupported action type: ${action.type}`);
-  }
-
-  private async executeEmailAction(action: any, body: any) {
-    if (!action.mail_profile_id || !action.mail_id || !action.email_to) {
-      throw new BadRequestException(
-        'Email action is missing required configuration.',
-      );
-    }
-
-    const profile = await (this.prisma as any).mail_profile.findUnique({
-      where: { id: Number(action.mail_profile_id) },
-    });
-    const mail = await (this.prisma as any).mail.findUnique({
-      where: { id: Number(action.mail_id) },
-      include: {
-        mail_locale: {
-          orderBy: [{ locale_id: 'asc' }],
-        },
-      },
-    });
-
-    if (!profile || !mail?.mail_locale?.length) {
-      throw new BadRequestException(
-        'Email action references an invalid profile or template.',
-      );
-    }
-
-    const template = mail.mail_locale[0];
-    const config = this.buildMailConfig(profile);
-    const sender = profile.from_name
-      ? `${profile.from_name} <${profile.from_email}>`
-      : profile.from_email;
-    const replyTo = profile.reply_to_email
-      ? profile.reply_to_name
-        ? `${profile.reply_to_name} <${profile.reply_to_email}>`
-        : profile.reply_to_email
-      : undefined;
-
-    try {
-      this.mailMainService.setConfig(config as any);
-      await this.mailMainService.send({
-        to: renderTemplate(action.email_to, body) as string,
-        cc: action.email_cc
-          ? (renderTemplate(action.email_cc, body) as string)
-          : undefined,
-        bcc: action.email_bcc
-          ? (renderTemplate(action.email_bcc, body) as string)
-          : undefined,
-        from: sender,
-        replyTo,
-        subject: renderTemplate(template.subject, body) as string,
-        body: renderTemplate(template.body, body) as string,
-        mail_id: mail.id,
-      } as any);
-    } finally {
-      await this.coreMailService.reloadConfig().catch(() => undefined);
-    }
-  }
-
-  private async executeWhatsappAction(action: any, body: any) {
-    const required = [
-      action.whatsapp_target,
-      action.whatsapp_template,
-      action.whatsapp_instance,
-      action.whatsapp_base_url,
-      action.whatsapp_token,
-    ];
-
-    if (required.some((value) => !String(value || '').trim())) {
-      throw new BadRequestException(
-        'WhatsApp action is missing required configuration.',
-      );
-    }
-
-    const baseUrl = String(action.whatsapp_base_url).replace(/\/+$/, '');
-    const instance = encodeURIComponent(action.whatsapp_instance);
-    const url = `${baseUrl}/message/sendText/${instance}`;
-    const message = renderTemplate(action.whatsapp_template, body);
-    const target = renderTemplate(action.whatsapp_target, body);
-
-    await firstValueFrom(
-      this.http.post(
-        url,
-        {
-          number: target,
-          text: message,
-        },
-        {
-          headers: {
-            apikey: action.whatsapp_token,
-            Authorization: `Bearer ${action.whatsapp_token}`,
-          },
-          timeout: 15000,
-        },
-      ),
-    );
-  }
-
-  private validateToken(integration: any, headers: any) {
-    if (!integration.require_token) {
-      return;
-    }
-
-    const provided =
-      headers['x-webhook-token'] ||
-      headers['X-Webhook-Token'] ||
-      headers.authorization?.replace(/^Bearer\s+/i, '');
-
-    if (!provided || hashToken(String(provided)) !== integration.token_hash) {
-      throw new BadRequestException('Invalid webhook token.');
-    }
-  }
-
-  private validateIp(integration: any, remoteIp: string | null) {
-    const allowedIps = Array.isArray(integration.allowed_ips)
-      ? integration.allowed_ips
-      : [];
-
-    if (!allowedIps.length) {
-      return;
-    }
-
-    if (!remoteIp || !allowedIps.includes(remoteIp)) {
-      throw new BadRequestException('Remote IP is not allowed.');
-    }
-  }
-
-  private validateBodySchema(integration: any, body: any) {
-    if (!integration.body_schema) {
-      return;
-    }
-
-    const errors = this.validateJsonSchema(integration.body_schema, body);
-    if (errors.length) {
-      throw new BadRequestException({
-        message: 'Webhook body does not match the configured schema.',
-        errors,
-      });
-    }
-  }
-
-  private validateJsonSchema(schema: any, value: any, path = '$'): string[] {
-    if (!schema || typeof schema !== 'object') {
-      return [];
-    }
-
-    const errors: string[] = [];
-    const type = schema.type;
-
-    if (type && !this.matchesJsonSchemaType(type, value)) {
-      errors.push(`${path} must be ${type}`);
-      return errors;
-    }
-
-    if (type === 'object' || schema.properties || schema.required) {
-      if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        errors.push(`${path} must be object`);
-        return errors;
-      }
-
-      for (const requiredKey of schema.required || []) {
-        if (value[requiredKey] === undefined || value[requiredKey] === null) {
-          errors.push(`${path}.${requiredKey} is required`);
-        }
-      }
-
-      for (const [key, childSchema] of Object.entries(
-        schema.properties || {},
-      )) {
-        if (value[key] !== undefined) {
-          errors.push(
-            ...this.validateJsonSchema(
-              childSchema,
-              value[key],
-              `${path}.${key}`,
-            ),
-          );
-        }
-      }
-    }
-
-    if (type === 'array' && schema.items && Array.isArray(value)) {
-      value.forEach((item, index) => {
-        errors.push(
-          ...this.validateJsonSchema(schema.items, item, `${path}[${index}]`),
-        );
-      });
-    }
-
-    return errors;
-  }
-
-  private matchesJsonSchemaType(type: string | string[], value: any) {
-    const types = Array.isArray(type) ? type : [type];
-    return types.some((item) => {
-      switch (item) {
-        case 'object':
-          return (
-            value !== null && typeof value === 'object' && !Array.isArray(value)
-          );
-        case 'array':
-          return Array.isArray(value);
-        case 'string':
-          return typeof value === 'string';
-        case 'number':
-          return typeof value === 'number';
-        case 'integer':
-          return Number.isInteger(value);
-        case 'boolean':
-          return typeof value === 'boolean';
-        case 'null':
-          return value === null;
-        default:
-          return true;
-      }
-    });
-  }
-
-  private async createCallLog(input: {
-    integration: any | null;
-    uuid: string;
-    status: 'success' | 'failed';
-    remoteIp: string | null;
-    durationMs: number;
-    payload: any;
-    response?: any;
-    error?: any;
-  }) {
-    if (!this.logs) {
-      return;
-    }
-
-    await this.logs.create({
-      data: {
-        webhook_integration_id: input.integration?.id ?? null,
-        public_uuid: input.uuid,
-        status: input.status,
-        remote_ip: input.remoteIp,
-        duration_ms: input.durationMs,
-        error_message: input.error
-          ? input.error instanceof Error
-            ? input.error.message
-            : String(input.error)
-          : null,
-        payload_summary: summarizePayload(input.payload),
-        response_summary: summarizePayload(input.response),
-      },
-    });
-  }
-
-  private getRemoteIp(req: Request) {
-    const forwardedFor = req.headers['x-forwarded-for'];
-    const forwardedIp = Array.isArray(forwardedFor)
-      ? forwardedFor[0]
-      : forwardedFor?.split(',')[0];
-
-    return forwardedIp?.trim() || req.ip || req.socket.remoteAddress || null;
-  }
-
-  private async ensureAction(integrationId: number, actionId: number) {
-    const record = await this.actions.findFirst({
-      where: {
-        id: actionId,
-        webhook_integration_id: integrationId,
-      },
-    });
-
-    if (!record) {
-      throw new NotFoundException(
-        `Webhook action with id ${actionId} not found.`,
-      );
-    }
-
-    return record;
-  }
-
-  private async ensureSlugAvailable(slug: string) {
-    const existing = await this.integrations.findUnique({
-      where: { slug: String(slug || '').trim() },
-      select: { id: true },
-    });
-
-    if (existing) {
-      throw new BadRequestException(
-        `Webhook integration "${slug}" already exists.`,
-      );
-    }
-  }
-
-  private normalizeIntegration(data: any, partial = false) {
-    const normalized: Record<string, any> = {};
-    const assign = (key: string, value: any) => {
-      if (!partial || value !== undefined) {
-        normalized[key] = value;
-      }
-    };
-
-    assign('slug', String(data.slug ?? '').trim());
-    assign('name', String(data.name ?? '').trim());
-    assign('description', this.nullableString(data.description, partial));
-    assign('status', data.status === 'inactive' ? 'inactive' : 'active');
-    assign('require_token', Boolean(data.require_token));
-    assign('allowed_ips', normalizeJsonObject(data.allowed_ips));
-    assign('body_schema', normalizeJsonObject(data.body_schema));
-
-    return normalized;
-  }
-
-  private normalizeAction(data: any, partial = false) {
-    const normalized: Record<string, any> = {};
-    const assign = (key: string, value: any) => {
-      if (!partial || value !== undefined) {
-        normalized[key] = value;
-      }
-    };
-
-    assign('type', data.type);
-    assign('name', String(data.name ?? '').trim());
-    assign('order', Number(data.order ?? 0));
-    assign('status', data.status === 'inactive' ? 'inactive' : 'active');
-    assign('mail_profile_id', this.nullableNumber(data.mail_profile_id));
-    assign('mail_id', this.nullableNumber(data.mail_id));
-    assign('email_to', this.nullableString(data.email_to, partial));
-    assign('email_cc', this.nullableString(data.email_cc, partial));
-    assign('email_bcc', this.nullableString(data.email_bcc, partial));
-    assign('whatsapp_target_type', data.whatsapp_target_type || null);
-    assign(
-      'whatsapp_target',
-      this.nullableString(data.whatsapp_target, partial),
-    );
-    assign(
-      'whatsapp_template',
-      this.nullableString(data.whatsapp_template, partial),
-    );
-    assign(
-      'whatsapp_instance',
-      this.nullableString(data.whatsapp_instance, partial),
-    );
-    assign(
-      'whatsapp_base_url',
-      this.nullableString(data.whatsapp_base_url, partial),
-    );
-    assign('whatsapp_token', this.nullableString(data.whatsapp_token, partial));
-
-    return normalized;
-  }
-
-  private nullableString(value: any, partial = false) {
-    if (value === undefined) {
-      return partial ? undefined : null;
-    }
-
-    if (value === null) {
-      return null;
-    }
-
-    const normalized = String(value).trim();
-    return normalized || null;
-  }
-
-  private nullableNumber(value: any) {
-    if (value === undefined || value === null || value === '') {
-      return null;
-    }
-
-    return Number(value);
-  }
-
-  private buildMailConfig(profile: any) {
-    switch (profile.provider) {
-      case 'SMTP':
-        return {
-          global: true,
-          type: 'SMTP',
-          host: profile.smtp_host,
-          port: Number(profile.smtp_port || 587),
-          secure: Boolean(profile.smtp_secure),
-          username: profile.smtp_username || '',
-          password: profile.smtp_password || '',
-        };
-      case 'GMAIL':
-        return {
-          global: true,
-          type: 'GMAIL',
-          clientId: profile.gmail_client_id,
-          clientSecret: profile.gmail_client_secret,
-          refreshToken: profile.gmail_refresh_token,
-          from: profile.from_email,
-        };
-      case 'SES':
-        return {
-          global: true,
-          type: 'SES',
-          region: profile.ses_region,
-          accessKeyId: profile.ses_access_key_id,
-          secretAccessKey: profile.ses_secret_access_key,
-          from: profile.from_email,
-        };
-      default:
-        throw new BadRequestException(
-          `Invalid mail profile provider: ${profile.provider}`,
-        );
-    }
-  }
-}
+import { DeleteDTO } from '@hed-hog/api';
+import { MailService as MailMainService } from '@hed-hog/api-mail';
+import { PaginationDTO, PaginationService } from '@hed-hog/api-pagination';
+import { PrismaService } from '@hed-hog/api-prisma';
+import { HttpService } from '@nestjs/axios';
+import {
+  BadRequestException,
+  HttpException,
+  Injectable,
+  NotFoundException,
+} from '@nestjs/common';
+import { Request } from 'express';
+import { firstValueFrom } from 'rxjs';
+import { MailService } from '../mail/mail.service';
+import { SettingService } from '../setting/setting.service';
+import {
+  createPlainToken,
+  createPublicUuid,
+  hashToken,
+  normalizeJsonObject,
+  renderTemplate,
+  sanitizeSensitiveData,
+  summarizePayload,
+} from './webhook-utils';
+
+type ActionExecutionLog = {
+  webhookActionId: number;
+  actionName: string;
+  actionType: 'email' | 'whatsapp_evolution';
+  status: 'success' | 'failed';
+  durationMs: number;
+  requestPayload?: unknown;
+  responsePayload?: unknown;
+  errorMessage?: string | null;
+};
+
+@Injectable()
+export class WebhookIntegrationService {
+  constructor(
+    private readonly prisma: PrismaService,
+    private readonly pagination: PaginationService,
+    private readonly http: HttpService,
+    private readonly mailMainService: MailMainService,
+    private readonly coreMailService: MailService,
+    private readonly settingService: SettingService,
+  ) {}
+
+  private get integrations() {
+    return (this.prisma as any).webhook_integration;
+  }
+
+  private get actions() {
+    return (this.prisma as any).webhook_action;
+  }
+
+  private get logs() {
+    return (this.prisma as any).webhook_call_log;
+  }
+
+  private get actionLogs() {
+    return (this.prisma as any).webhook_action_log;
+  }
+
+  async list(paginationParams: PaginationDTO) {
+    const fields = ['slug', 'name', 'description', 'public_uuid', 'status'];
+    const OR = this.prisma.createInsensitiveSearch(fields, paginationParams);
+
+    const result = await this.pagination.paginate(
+      this.integrations,
+      paginationParams,
+      {
+        where: OR.length > 0 ? { OR } : {},
+        include: {
+          webhook_action: {
+            orderBy: [{ order: 'asc' }, { id: 'asc' }],
+          },
+        },
+        orderBy: [{ updated_at: 'desc' }, { id: 'desc' }],
+      },
+    );
+
+    return {
+      ...result,
+      data: await this.withPublicUrls(result.data || []),
+    };
+  }
+
+  async get(id: number) {
+    const record = await this.integrations.findUnique({
+      where: { id },
+      include: {
+        webhook_action: {
+          orderBy: [{ order: 'asc' }, { id: 'asc' }],
+        },
+      },
+    });
+
+    if (!record) {
+      throw new NotFoundException(
+        `Webhook integration with id ${id} not found.`,
+      );
+    }
+
+    return this.withPublicUrl(record);
+  }
+
+  async create(data: any) {
+    await this.ensureSlugAvailable(data.slug);
+
+    let plainToken: string | null = null;
+    if (data.require_token) {
+      plainToken = createPlainToken();
+    }
+
+    const record = await this.integrations.create({
+      data: {
+        ...this.normalizeIntegration(data),
+        public_uuid: createPublicUuid(),
+        token_hash: plainToken ? hashToken(plainToken) : null,
+      },
+    });
+
+    return {
+      ...(await this.withPublicUrl(record)),
+      plainToken,
+    };
+  }
+
+  async update(id: number, data: any) {
+    const existing = await this.get(id);
+    if (data.slug && data.slug !== existing.slug) {
+      await this.ensureSlugAvailable(data.slug);
+    }
+
+    let plainToken: string | null = null;
+    const updateData = this.normalizeIntegration(data, true);
+    if (data.require_token === false) {
+      updateData.token_hash = null;
+    } else if (data.require_token === true && !existing.token_hash) {
+      plainToken = createPlainToken();
+      updateData.token_hash = hashToken(plainToken);
+    }
+
+    const record = await this.integrations.update({
+      where: { id },
+      data: updateData,
+    });
+
+    return {
+      ...(await this.withPublicUrl(record)),
+      plainToken,
+    };
+  }
+
+  async delete(data: DeleteDTO) {
+    if (!data.ids?.length) {
+      throw new BadRequestException(
+        'You must select at least one item to delete.',
+      );
+    }
+
+    return this.integrations.deleteMany({
+      where: { id: { in: data.ids } },
+    });
+  }
+
+  async regenerateUuid(id: number) {
+    await this.get(id);
+    const record = await this.integrations.update({
+      where: { id },
+      data: { public_uuid: createPublicUuid() },
+    });
+
+    return this.withPublicUrl(record);
+  }
+
+  async regenerateToken(id: number) {
+    await this.get(id);
+    const plainToken = createPlainToken();
+    const record = await this.integrations.update({
+      where: { id },
+      data: {
+        require_token: true,
+        token_hash: hashToken(plainToken),
+      },
+    });
+
+    return {
+      ...(await this.withPublicUrl(record)),
+      plainToken,
+    };
+  }
+
+  private async getApplicationBaseUrl() {
+    const settings = await this.settingService.getSettingValues('url');
+    const value = settings?.url;
+    return typeof value === 'string' ? value.replace(/\/+$/, '') : '';
+  }
+
+  private async withPublicUrl<T extends { public_uuid?: string | null }>(
+    record: T,
+  ) {
+    const baseUrl = await this.getApplicationBaseUrl();
+    return {
+      ...record,
+      public_url:
+        baseUrl && record.public_uuid
+          ? `${baseUrl}/webhook/${record.public_uuid}`
+          : null,
+    };
+  }
+
+  private async withPublicUrls<T extends { public_uuid?: string | null }>(
+    records: T[],
+  ) {
+    const baseUrl = await this.getApplicationBaseUrl();
+    return records.map((record) => ({
+      ...record,
+      public_url:
+        baseUrl && record.public_uuid
+          ? `${baseUrl}/webhook/${record.public_uuid}`
+          : null,
+    }));
+  }
+
+  async listActions(integrationId: number) {
+    await this.get(integrationId);
+    return this.actions.findMany({
+      where: { webhook_integration_id: integrationId },
+      orderBy: [{ order: 'asc' }, { id: 'asc' }],
+    });
+  }
+
+  async createAction(integrationId: number, data: any) {
+    await this.get(integrationId);
+    return this.actions.create({
+      data: {
+        ...this.normalizeAction(data),
+        webhook_integration_id: integrationId,
+      },
+    });
+  }
+
+  async updateAction(integrationId: number, actionId: number, data: any) {
+    await this.ensureAction(integrationId, actionId);
+    return this.actions.update({
+      where: { id: actionId },
+      data: this.normalizeAction(data, true),
+    });
+  }
+
+  async deleteActions(integrationId: number, data: DeleteDTO) {
+    await this.get(integrationId);
+    if (!data.ids?.length) {
+      throw new BadRequestException(
+        'You must select at least one item to delete.',
+      );
+    }
+
+    return this.actions.deleteMany({
+      where: {
+        webhook_integration_id: integrationId,
+        id: { in: data.ids },
+      },
+    });
+  }
+
+  async listLogs(integrationId: number, paginationParams: PaginationDTO) {
+    await this.get(integrationId);
+    const result = await this.pagination.paginate(this.logs, paginationParams, {
+      where: { webhook_integration_id: integrationId },
+      orderBy: [{ created_at: 'desc' }, { id: 'desc' }],
+    });
+
+    const logIds = (result.data || [])
+      .map((item: any) => item.id)
+      .filter((id: unknown) => typeof id === 'number');
+
+    if (!logIds.length || !this.actionLogs) {
+      return result;
+    }
+
+    const actionLogs = await this.actionLogs.findMany({
+      where: {
+        webhook_call_log_id: { in: logIds },
+      },
+      orderBy: [{ created_at: 'asc' }, { id: 'asc' }],
+    });
+
+    const actionLogsByCallId = new Map<number, any[]>();
+    for (const actionLog of actionLogs || []) {
+      const list = actionLogsByCallId.get(actionLog.webhook_call_log_id) || [];
+      list.push(actionLog);
+      actionLogsByCallId.set(actionLog.webhook_call_log_id, list);
+    }
+
+    return {
+      ...result,
+      data: (result.data || []).map((item: any) => ({
+        ...item,
+        webhook_action_log: actionLogsByCallId.get(item.id) || [],
+      })),
+    };
+  }
+
+  async executePublic(uuid: string, body: any, headers: any, req: Request) {
+    const startedAt = Date.now();
+    const remoteIp = this.getRemoteIp(req);
+    const actionLogs: ActionExecutionLog[] = [];
+    let integration: any | null = null;
+
+    try {
+      integration = await this.integrations.findUnique({
+        where: { public_uuid: uuid },
+        include: {
+          webhook_action: {
+            where: { status: 'active' },
+            orderBy: [{ order: 'asc' }, { id: 'asc' }],
+          },
+        },
+      });
+
+      if (!integration || integration.status !== 'active') {
+        throw new NotFoundException('Webhook not found.');
+      }
+
+      this.validateToken(integration, headers);
+      this.validateIp(integration, remoteIp);
+      this.validateBodySchema(integration, body);
+
+      const actionResults = [];
+      for (const action of integration.webhook_action || []) {
+        const actionStartedAt = Date.now();
+
+        try {
+          const result = await this.executeAction(action, body);
+          const durationMs = Date.now() - actionStartedAt;
+
+          actionResults.push({
+            id: action.id,
+            type: action.type,
+            success: true,
+            duration_ms: durationMs,
+            response: summarizePayload(result.responsePayload),
+          });
+
+          actionLogs.push({
+            webhookActionId: action.id,
+            actionName: action.name,
+            actionType: action.type,
+            status: 'success',
+            durationMs,
+            requestPayload: result.requestPayload,
+            responsePayload: result.responsePayload,
+          });
+        } catch (error) {
+          const durationMs = Date.now() - actionStartedAt;
+          const errorMessage = this.extractErrorMessage(error);
+
+          actionResults.push({
+            id: action.id,
+            type: action.type,
+            success: false,
+            duration_ms: durationMs,
+            error: errorMessage,
+            response: summarizePayload(this.extractErrorResponse(error)),
+          });
+
+          actionLogs.push({
+            webhookActionId: action.id,
+            actionName: action.name,
+            actionType: action.type,
+            status: 'failed',
+            durationMs,
+            errorMessage,
+            responsePayload: this.extractErrorResponse(error),
+          });
+
+          throw error;
+        }
+      }
+
+      const response = {
+        success: true,
+        actions: actionResults,
+      };
+
+      const callLog = await this.createCallLog({
+        integration,
+        uuid,
+        status: 'success',
+        remoteIp,
+        durationMs: Date.now() - startedAt,
+        payload: body,
+        response,
+      });
+
+      await this.createActionLogs(callLog?.id, actionLogs);
+
+      return response;
+    } catch (error) {
+      const callLog = await this.createCallLog({
+        integration,
+        uuid,
+        status: 'failed',
+        remoteIp,
+        durationMs: Date.now() - startedAt,
+        payload: body,
+        response: {
+          success: false,
+          actions: actionLogs.map((item) => ({
+            id: item.webhookActionId,
+            type: item.actionType,
+            success: item.status === 'success',
+            duration_ms: item.durationMs,
+            error: item.errorMessage || null,
+          })),
+        },
+        error,
+      }).catch(() => null);
+
+      await this.createActionLogs(callLog?.id, actionLogs).catch(() => undefined);
+
+      if (error instanceof HttpException) {
+        throw error;
+      }
+
+      return {
+        success: false,
+        actions: actionLogs.map((item) => ({
+          id: item.webhookActionId,
+          type: item.actionType,
+          success: item.status === 'success',
+          duration_ms: item.durationMs,
+          error: item.errorMessage || null,
+        })),
+      };
+    }
+  }
+
+  private async executeAction(action: any, body: any) {
+    if (action.type === 'email') {
+      return this.executeEmailAction(action, body);
+    }
+
+    if (action.type === 'whatsapp_evolution') {
+      return this.executeWhatsappAction(action, body);
+    }
+
+    throw new BadRequestException(`Unsupported action type: ${action.type}`);
+  }
+
+  private async executeEmailAction(action: any, body: any) {
+    if (!action.mail_profile_id || !action.mail_id || !action.email_to) {
+      throw new BadRequestException(
+        'Email action is missing required configuration.',
+      );
+    }
+
+    const profile = await (this.prisma as any).mail_profile.findUnique({
+      where: { id: Number(action.mail_profile_id) },
+    });
+    const mail = await (this.prisma as any).mail.findUnique({
+      where: { id: Number(action.mail_id) },
+      include: {
+        mail_locale: {
+          orderBy: [{ locale_id: 'asc' }],
+        },
+      },
+    });
+
+    if (!profile || !mail?.mail_locale?.length) {
+      throw new BadRequestException(
+        'Email action references an invalid profile or template.',
+      );
+    }
+
+    const template = mail.mail_locale[0];
+    const config = this.buildMailConfig(profile);
+    const sender = profile.from_name
+      ? `${profile.from_name} <${profile.from_email}>`
+      : profile.from_email;
+    const replyTo = profile.reply_to_email
+      ? profile.reply_to_name
+        ? `${profile.reply_to_name} <${profile.reply_to_email}>`
+        : profile.reply_to_email
+      : undefined;
+
+    const requestPayload = {
+      to: renderTemplate(action.email_to, body) as string,
+      cc: action.email_cc
+        ? (renderTemplate(action.email_cc, body) as string)
+        : undefined,
+      bcc: action.email_bcc
+        ? (renderTemplate(action.email_bcc, body) as string)
+        : undefined,
+      from: sender,
+      replyTo,
+      subject: renderTemplate(template.subject, body) as string,
+      body: renderTemplate(template.body, body) as string,
+      mail_id: mail.id,
+    };
+
+    try {
+      this.mailMainService.setConfig(config as any);
+      const providerResponse = await this.mailMainService.send(
+        requestPayload as any,
+      );
+
+      return {
+        requestPayload,
+        responsePayload: {
+          provider: 'email',
+          response: providerResponse || null,
+        },
+      };
+    } finally {
+      await this.coreMailService.reloadConfig().catch(() => undefined);
+    }
+  }
+
+  private async executeWhatsappAction(action: any, body: any) {
+    const required = [
+      action.whatsapp_target,
+      action.whatsapp_template,
+      action.whatsapp_instance,
+      action.whatsapp_base_url,
+      action.whatsapp_token,
+    ];
+
+    if (required.some((value) => !String(value || '').trim())) {
+      throw new BadRequestException(
+        'WhatsApp action is missing required configuration.',
+      );
+    }
+
+    const baseUrl = String(action.whatsapp_base_url).replace(/\/+$/, '');
+    const instance = encodeURIComponent(action.whatsapp_instance);
+    const url = `${baseUrl}/message/sendText/${instance}`;
+    const message = renderTemplate(action.whatsapp_template, body);
+    const target = renderTemplate(action.whatsapp_target, body);
+
+    const response = await firstValueFrom(
+      this.http.post(
+        url,
+        {
+          number: target,
+          text: message,
+        },
+        {
+          headers: {
+            apikey: action.whatsapp_token,
+            Authorization: `Bearer ${action.whatsapp_token}`,
+          },
+          timeout: 15000,
+        },
+      ),
+    );
+
+    return {
+      requestPayload: {
+        url,
+        number: target,
+        text: message,
+      },
+      responsePayload: {
+        status: response?.status || null,
+        statusText: response?.statusText || null,
+        data: response?.data || null,
+      },
+    };
+  }
+
+  private validateToken(integration: any, headers: any) {
+    if (!integration.require_token) {
+      return;
+    }
+
+    const provided =
+      headers['x-webhook-token'] ||
+      headers['X-Webhook-Token'] ||
+      headers.authorization?.replace(/^Bearer\s+/i, '');
+
+    if (!provided || hashToken(String(provided)) !== integration.token_hash) {
+      throw new BadRequestException('Invalid webhook token.');
+    }
+  }
+
+  private validateIp(integration: any, remoteIp: string | null) {
+    const allowedIps = Array.isArray(integration.allowed_ips)
+      ? integration.allowed_ips
+      : [];
+
+    if (!allowedIps.length) {
+      return;
+    }
+
+    if (!remoteIp || !allowedIps.includes(remoteIp)) {
+      throw new BadRequestException('Remote IP is not allowed.');
+    }
+  }
+
+  private validateBodySchema(integration: any, body: any) {
+    if (!integration.body_schema) {
+      return;
+    }
+
+    const errors = this.validateJsonSchema(integration.body_schema, body);
+    if (errors.length) {
+      throw new BadRequestException({
+        message: 'Webhook body does not match the configured schema.',
+        errors,
+      });
+    }
+  }
+
+  private validateJsonSchema(schema: any, value: any, path = '$'): string[] {
+    if (!schema || typeof schema !== 'object') {
+      return [];
+    }
+
+    const errors: string[] = [];
+    const type = schema.type;
+
+    if (type && !this.matchesJsonSchemaType(type, value)) {
+      errors.push(`${path} must be ${type}`);
+      return errors;
+    }
+
+    if (type === 'object' || schema.properties || schema.required) {
+      if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        errors.push(`${path} must be object`);
+        return errors;
+      }
+
+      for (const requiredKey of schema.required || []) {
+        if (value[requiredKey] === undefined || value[requiredKey] === null) {
+          errors.push(`${path}.${requiredKey} is required`);
+        }
+      }
+
+      for (const [key, childSchema] of Object.entries(
+        schema.properties || {},
+      )) {
+        if (value[key] !== undefined) {
+          errors.push(
+            ...this.validateJsonSchema(
+              childSchema,
+              value[key],
+              `${path}.${key}`,
+            ),
+          );
+        }
+      }
+    }
+
+    if (type === 'array' && schema.items && Array.isArray(value)) {
+      value.forEach((item, index) => {
+        errors.push(
+          ...this.validateJsonSchema(schema.items, item, `${path}[${index}]`),
+        );
+      });
+    }
+
+    return errors;
+  }
+
+  private matchesJsonSchemaType(type: string | string[], value: any) {
+    const types = Array.isArray(type) ? type : [type];
+    return types.some((item) => {
+      switch (item) {
+        case 'object':
+          return (
+            value !== null && typeof value === 'object' && !Array.isArray(value)
+          );
+        case 'array':
+          return Array.isArray(value);
+        case 'string':
+          return typeof value === 'string';
+        case 'number':
+          return typeof value === 'number';
+        case 'integer':
+          return Number.isInteger(value);
+        case 'boolean':
+          return typeof value === 'boolean';
+        case 'null':
+          return value === null;
+        default:
+          return true;
+      }
+    });
+  }
+
+  private async createCallLog(input: {
+    integration: any | null;
+    uuid: string;
+    status: 'success' | 'failed';
+    remoteIp: string | null;
+    durationMs: number;
+    payload: any;
+    response?: any;
+    error?: any;
+  }) {
+    if (!this.logs) {
+      return null;
+    }
+
+    return this.logs.create({
+      data: {
+        webhook_integration_id: input.integration?.id ?? null,
+        public_uuid: input.uuid,
+        status: input.status,
+        remote_ip: input.remoteIp,
+        duration_ms: input.durationMs,
+        error_message: input.error ? this.extractErrorMessage(input.error) : null,
+        payload_summary: summarizePayload(sanitizeSensitiveData(input.payload)),
+        response_summary: summarizePayload(sanitizeSensitiveData(input.response)),
+      },
+      select: {
+        id: true,
+      },
+    });
+  }
+
+  private async createActionLogs(callLogId: number | undefined, logs: ActionExecutionLog[]) {
+    if (!callLogId || !logs.length || !this.actionLogs) {
+      return;
+    }
+
+    await this.actionLogs.createMany({
+      data: logs.map((item) => ({
+        webhook_call_log_id: callLogId,
+        webhook_action_id: item.webhookActionId,
+        action_name: item.actionName,
+        action_type: item.actionType,
+        status: item.status,
+        duration_ms: item.durationMs,
+        request_payload: summarizePayload(sanitizeSensitiveData(item.requestPayload)),
+        response_payload: summarizePayload(
+          sanitizeSensitiveData(item.responsePayload),
+        ),
+        error_message: item.errorMessage || null,
+      })),
+    });
+  }
+
+  private extractErrorMessage(error: unknown) {
+    if (!error) {
+      return 'Unknown error';
+    }
+
+    if (error instanceof Error && error.message) {
+      return error.message;
+    }
+
+    if (typeof error === 'object' && (error as any).message) {
+      return String((error as any).message);
+    }
+
+    return String(error);
+  }
+
+  private extractErrorResponse(error: unknown) {
+    if (!error || typeof error !== 'object') {
+      return null;
+    }
+
+    const maybeResponse = (error as any).response;
+    if (!maybeResponse) {
+      return null;
+    }
+
+    return {
+      status: maybeResponse.status || null,
+      statusText: maybeResponse.statusText || null,
+      data: maybeResponse.data || null,
+    };
+  }
+
+  private getRemoteIp(req: Request) {
+    const forwardedFor = req.headers['x-forwarded-for'];
+    const forwardedIp = Array.isArray(forwardedFor)
+      ? forwardedFor[0]
+      : forwardedFor?.split(',')[0];
+
+    return forwardedIp?.trim() || req.ip || req.socket.remoteAddress || null;
+  }
+
+  private async ensureAction(integrationId: number, actionId: number) {
+    const record = await this.actions.findFirst({
+      where: {
+        id: actionId,
+        webhook_integration_id: integrationId,
+      },
+    });
+
+    if (!record) {
+      throw new NotFoundException(
+        `Webhook action with id ${actionId} not found.`,
+      );
+    }
+
+    return record;
+  }
+
+  private async ensureSlugAvailable(slug: string) {
+    const existing = await this.integrations.findUnique({
+      where: { slug: String(slug || '').trim() },
+      select: { id: true },
+    });
+
+    if (existing) {
+      throw new BadRequestException(
+        `Webhook integration "${slug}" already exists.`,
+      );
+    }
+  }
+
+  private normalizeIntegration(data: any, partial = false) {
+    const normalized: Record<string, any> = {};
+    const assign = (key: string, value: any) => {
+      if (!partial || value !== undefined) {
+        normalized[key] = value;
+      }
+    };
+
+    assign('slug', String(data.slug ?? '').trim());
+    assign('name', String(data.name ?? '').trim());
+    assign('description', this.nullableString(data.description, partial));
+    assign('status', data.status === 'inactive' ? 'inactive' : 'active');
+    assign('require_token', Boolean(data.require_token));
+    assign('allowed_ips', normalizeJsonObject(data.allowed_ips));
+    assign('body_schema', normalizeJsonObject(data.body_schema));
+
+    return normalized;
+  }
+
+  private normalizeAction(data: any, partial = false) {
+    const normalized: Record<string, any> = {};
+    const assign = (key: string, value: any) => {
+      if (!partial || value !== undefined) {
+        normalized[key] = value;
+      }
+    };
+
+    assign('type', data.type);
+    assign('name', String(data.name ?? '').trim());
+    assign('order', Number(data.order ?? 0));
+    assign('status', data.status === 'inactive' ? 'inactive' : 'active');
+    assign('mail_profile_id', this.nullableNumber(data.mail_profile_id));
+    assign('mail_id', this.nullableNumber(data.mail_id));
+    assign('email_to', this.nullableString(data.email_to, partial));
+    assign('email_cc', this.nullableString(data.email_cc, partial));
+    assign('email_bcc', this.nullableString(data.email_bcc, partial));
+    assign('whatsapp_target_type', data.whatsapp_target_type || null);
+    assign(
+      'whatsapp_target',
+      this.nullableString(data.whatsapp_target, partial),
+    );
+    assign(
+      'whatsapp_template',
+      this.nullableString(data.whatsapp_template, partial),
+    );
+    assign(
+      'whatsapp_instance',
+      this.nullableString(data.whatsapp_instance, partial),
+    );
+    assign(
+      'whatsapp_base_url',
+      this.nullableString(data.whatsapp_base_url, partial),
+    );
+    assign('whatsapp_token', this.nullableString(data.whatsapp_token, partial));
+
+    return normalized;
+  }
+
+  private nullableString(value: any, partial = false) {
+    if (value === undefined) {
+      return partial ? undefined : null;
+    }
+
+    if (value === null) {
+      return null;
+    }
+
+    const normalized = String(value).trim();
+    return normalized || null;
+  }
+
+  private nullableNumber(value: any) {
+    if (value === undefined || value === null || value === '') {
+      return null;
+    }
+
+    return Number(value);
+  }
+
+  private buildMailConfig(profile: any) {
+    switch (profile.provider) {
+      case 'SMTP':
+        return {
+          global: true,
+          type: 'SMTP',
+          host: profile.smtp_host,
+          port: Number(profile.smtp_port || 587),
+          secure: Boolean(profile.smtp_secure),
+          username: profile.smtp_username || '',
+          password: profile.smtp_password || '',
+        };
+      case 'GMAIL':
+        return {
+          global: true,
+          type: 'GMAIL',
+          clientId: profile.gmail_client_id,
+          clientSecret: profile.gmail_client_secret,
+          refreshToken: profile.gmail_refresh_token,
+          from: profile.from_email,
+        };
+      case 'SES':
+        return {
+          global: true,
+          type: 'SES',
+          region: profile.ses_region,
+          accessKeyId: profile.ses_access_key_id,
+          secretAccessKey: profile.ses_secret_access_key,
+          from: profile.from_email,
+        };
+      default:
+        throw new BadRequestException(
+          `Invalid mail profile provider: ${profile.provider}`,
+        );
+    }
+  }
+}