cobroya 1.0.0

package/dist/schemas.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allSchemas = exports.getMerchantInfoSchema = exports.searchPaymentsSchema = exports.createRefundSchema = exports.getPaymentSchema = exports.createPaymentPreferenceSchema = void 0;
+exports.createPaymentPreferenceSchema = {
+    name: "create_payment_preference",
+    description: "Creates a Mercado Pago checkout payment preference (payment link). Returns init_point URL for redirecting buyers.",
+    parameters: {
+        type: "object",
+        required: ["title", "quantity", "currency", "unit_price"],
+        properties: {
+            title: { type: "string", description: "Product or service title" },
+            quantity: { type: "number", description: "Quantity of items" },
+            currency: { type: "string", description: "Currency ID (e.g. ARS, BRL, MXN, CLP, COP, UYU, PEN)" },
+            unit_price: { type: "number", description: "Unit price of the item" },
+            back_urls: {
+                type: "object",
+                description: "URLs to redirect the buyer after payment",
+                properties: {
+                    success: { type: "string", description: "URL on approved payment" },
+                    failure: { type: "string", description: "URL on rejected payment" },
+                    pending: { type: "string", description: "URL on pending payment" },
+                },
+            },
+            notification_url: { type: "string", description: "Webhook URL for payment notifications (IPN)" },
+        },
+    },
+};
+exports.getPaymentSchema = {
+    name: "get_payment",
+    description: "Retrieve a payment by its ID. Returns full payment details including status, amount, payer info.",
+    parameters: {
+        type: "object",
+        required: ["payment_id"],
+        properties: {
+            payment_id: { type: "string", description: "The payment ID to look up" },
+        },
+    },
+};
+exports.createRefundSchema = {
+    name: "create_refund",
+    description: "Refund a payment fully or partially. Omit amount for full refund.",
+    parameters: {
+        type: "object",
+        required: ["payment_id"],
+        properties: {
+            payment_id: { type: "string", description: "The payment ID to refund" },
+            amount: { type: "number", description: "Partial refund amount. Omit for full refund." },
+        },
+    },
+};
+exports.searchPaymentsSchema = {
+    name: "search_payments",
+    description: "Search recent payments for the authenticated merchant. Supports filtering by status.",
+    parameters: {
+        type: "object",
+        properties: {
+            status: { type: "string", description: "Filter by status: approved, pending, rejected, refunded, cancelled" },
+            sort: { type: "string", description: "Sort field (e.g. date_created)" },
+            criteria: { type: "string", description: "Sort order: asc or desc" },
+            limit: { type: "number", description: "Max results (default 30, max 100)" },
+            offset: { type: "number", description: "Pagination offset" },
+        },
+    },
+};
+exports.getMerchantInfoSchema = {
+    name: "get_merchant_info",
+    description: "Retrieve the authenticated merchant's user profile including ID, nickname, and site.",
+    parameters: {
+        type: "object",
+        properties: {},
+    },
+};
+exports.allSchemas = [
+    exports.createPaymentPreferenceSchema,
+    exports.getPaymentSchema,
+    exports.createRefundSchema,
+    exports.searchPaymentsSchema,
+    exports.getMerchantInfoSchema,
+];
+//# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";;;AAkCa,QAAA,6BAA6B,GAAG;IAC3C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,mHAAmH;IAChI,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;QACzD,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;YAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;YACjG,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;YACrE,SAAS,EAAE;gBACT,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0CAA0C;gBACvD,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;oBACnE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;oBACnE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;iBACnE;aACF;YACD,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;SACjG;KACF;CACO,CAAC;AAEE,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,kGAAkG;IAC/G,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;SACzE;KACF;CACO,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,mEAAmE;IAChF,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;YACvE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;SACxF;KACF;CACO,CAAC;AAEE,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,sFAAsF;IACnG,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE;YAC7G,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;YACvE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;YACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;YAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;SAC7D;KACF;CACO,CAAC;AAEE,QAAA,qBAAqB,GAAG;IACnC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,sFAAsF;IACnG,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE;KACf;CACO,CAAC;AAEE,QAAA,UAAU,GAAG;IACxB,qCAA6B;IAC7B,wBAAgB;IAChB,0BAAkB;IAClB,4BAAoB;IACpB,6BAAqB;CACtB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1 @@
+import "dotenv/config";

package/dist/server.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("dotenv/config");
+/**
+ * Unified production server.
+ *
+ * Runs in a single process:
+ *   - Telegram bot (polling)
+ *   - WhatsApp webhook (POST /whatsapp)
+ *   - Mercado Pago IPN webhook (POST /mp-webhook)
+ *   - Health check (GET /health)
+ *
+ * Deploy this on Railway, Fly.io, Render, or any VPS.
+ */
+const node_http_1 = require("node:http");
+const telegram_bot_js_1 = require("./telegram-bot.js");
+const webhook_js_1 = require("./whatsapp/webhook.js");
+const webhook_js_2 = require("./webhook.js");
+const client_js_1 = require("./whatsapp/client.js");
+const handlers_js_1 = require("./whatsapp/handlers.js");
+const landing_js_1 = require("./landing.js");
+const PORT = Number(process.env.PORT ?? 3000);
+const MP_TOKEN = process.env.MERCADO_PAGO_ACCESS_TOKEN ?? "";
+const MP_WEBHOOK_SECRET = process.env.MERCADO_PAGO_WEBHOOK_SECRET;
+// ─── Telegram Bot ─────────────────────────────────────────
+const TELEGRAM_ENABLED = !!process.env.TELEGRAM_BOT_TOKEN;
+const TELEGRAM_NOTIFY_CHAT_ID = process.env.TELEGRAM_NOTIFY_CHAT_ID;
+let telegramBot = null;
+if (TELEGRAM_ENABLED) {
+    try {
+        telegramBot = (0, telegram_bot_js_1.startBot)();
+    }
+    catch (err) {
+        console.error("Telegram bot failed to start:", err);
+    }
+}
+// ─── WhatsApp Webhook ─────────────────────────────────────
+const WA_ENABLED = !!process.env.WHATSAPP_ACCESS_TOKEN &&
+    !!process.env.WHATSAPP_PHONE_NUMBER_ID &&
+    !!process.env.WHATSAPP_VERIFY_TOKEN;
+const WA_ALLOWED_PHONES = process.env.WHATSAPP_ALLOWED_PHONES
+    ? new Set(process.env.WHATSAPP_ALLOWED_PHONES.split(",").map((p) => p.trim()))
+    : undefined;
+const waHandler = WA_ENABLED
+    ? (0, webhook_js_1.createWhatsAppWebhookHandler)({
+        waAccessToken: process.env.WHATSAPP_ACCESS_TOKEN,
+        waPhoneNumberId: process.env.WHATSAPP_PHONE_NUMBER_ID,
+        verifyToken: process.env.WHATSAPP_VERIFY_TOKEN,
+        mpAccessToken: MP_TOKEN,
+        currency: process.env.MP_CURRENCY ?? "ARS",
+        successUrl: process.env.MP_SUCCESS_URL,
+        allowedPhones: WA_ALLOWED_PHONES,
+    })
+    : null;
+// ─── MP IPN Webhook + Notifications ──────────────────────
+// If WhatsApp is enabled and a notify phone is set, forward approved payments
+const WA_NOTIFY_PHONE = process.env.WA_NOTIFY_PHONE;
+const paymentCallbacks = [];
+// WhatsApp notification
+if (WA_ENABLED && WA_NOTIFY_PHONE) {
+    const waClient = new client_js_1.WhatsAppClient({
+        accessToken: process.env.WHATSAPP_ACCESS_TOKEN,
+        phoneNumberId: process.env.WHATSAPP_PHONE_NUMBER_ID,
+    });
+    paymentCallbacks.push((0, handlers_js_1.createPaymentNotifier)(waClient, WA_NOTIFY_PHONE));
+}
+// Telegram notification
+if (telegramBot && TELEGRAM_NOTIFY_CHAT_ID) {
+    const chatId = Number(TELEGRAM_NOTIFY_CHAT_ID);
+    paymentCallbacks.push(async (payment) => {
+        const p = payment;
+        if (p.status !== "approved")
+            return;
+        await telegramBot.sendMessage(chatId, `Pago recibido\nMonto: $${p.transaction_amount}\nID: ${p.id}` +
+            (p.description ? `\nDescripcion: ${p.description}` : ""));
+    });
+}
+// Console log (always)
+paymentCallbacks.push(async (payment) => {
+    const p = payment;
+    console.log(`[PAYMENT] #${p.id} — ${p.status} — $${p.transaction_amount}`);
+});
+const mpWebhookHandler = MP_TOKEN
+    ? (0, webhook_js_2.createWebhookHandler)({
+        accessToken: MP_TOKEN,
+        secret: MP_WEBHOOK_SECRET,
+        onPayment: async (payment) => {
+            await Promise.allSettled(paymentCallbacks.map((cb) => cb(payment)));
+        },
+    })
+    : null;
+// ─── HTTP Server ──────────────────────────────────────────
+async function nodeToWebRequest(req, url) {
+    const body = await new Promise((resolve, reject) => {
+        let data = "";
+        req.on("data", (chunk) => {
+            data += chunk.toString();
+        });
+        req.on("end", () => resolve(data));
+        req.on("error", reject);
+    });
+    return new Request(url.toString(), {
+        method: req.method,
+        headers: req.headers,
+        body: req.method === "GET" ? undefined : body,
+    });
+}
+async function webToNodeResponse(webRes, res) {
+    const text = await webRes.text();
+    res.writeHead(webRes.status).end(text);
+}
+const server = (0, node_http_1.createServer)(async (req, res) => {
+    const url = new URL(req.url ?? "/", `http://localhost:${PORT}`);
+    const path = url.pathname;
+    // OG Image (SVG)
+    if (path === "/og.svg") {
+        const svg = `<svg width="1200" height="630" xmlns="http://www.w3.org/2000/svg">
+      <rect width="1200" height="630" fill="#09090b"/>
+      <rect x="0" y="0" width="1200" height="4" fill="url(#g)"/>
+      <defs><linearGradient id="g" x1="0" y1="0" x2="1" y2="0"><stop offset="0%" stop-color="#3b82f6"/><stop offset="100%" stop-color="#8b5cf6"/></linearGradient></defs>
+      <text x="100" y="200" font-family="system-ui,sans-serif" font-size="72" font-weight="800" fill="#fafafa">CobroYa</text>
+      <text x="100" y="300" font-family="system-ui,sans-serif" font-size="42" fill="#a1a1aa">Cobra con Mercado Pago</text>
+      <text x="100" y="360" font-family="system-ui,sans-serif" font-size="42" fill="#a1a1aa">en 10 segundos</text>
+      <text x="100" y="460" font-family="system-ui,sans-serif" font-size="28" fill="#3b82f6">Telegram</text>
+      <text x="310" y="460" font-family="system-ui,sans-serif" font-size="28" fill="#27272a">|</text>
+      <text x="350" y="460" font-family="system-ui,sans-serif" font-size="28" fill="#22c55e">WhatsApp</text>
+      <text x="590" y="460" font-family="system-ui,sans-serif" font-size="28" fill="#27272a">|</text>
+      <text x="630" y="460" font-family="system-ui,sans-serif" font-size="28" fill="#8b5cf6">AI Agents</text>
+      <text x="100" y="550" font-family="system-ui,sans-serif" font-size="22" fill="#52525b">cobroya.app</text>
+    </svg>`;
+        res.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=86400" });
+        res.end(svg);
+        return;
+    }
+    // Landing page
+    if (path === "/") {
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        res.end(landing_js_1.landingHTML);
+        return;
+    }
+    // Health check
+    if (path === "/health") {
+        const status = {
+            ok: true,
+            telegram: TELEGRAM_ENABLED,
+            whatsapp: WA_ENABLED,
+            mp_webhook: !!mpWebhookHandler,
+            uptime: process.uptime(),
+        };
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(status));
+        return;
+    }
+    // WhatsApp webhook
+    if (path.startsWith("/whatsapp") && waHandler) {
+        const webReq = await nodeToWebRequest(req, url);
+        const webRes = await waHandler(webReq);
+        await webToNodeResponse(webRes, res);
+        return;
+    }
+    // Mercado Pago IPN webhook
+    if (path.startsWith("/mp-webhook") && mpWebhookHandler) {
+        const webReq = await nodeToWebRequest(req, url);
+        const webRes = await mpWebhookHandler(webReq);
+        await webToNodeResponse(webRes, res);
+        return;
+    }
+    res.writeHead(404).end("Not Found");
+});
+server.listen(PORT, () => {
+    console.log(`\n=== mercadopago-tool server ===`);
+    console.log(`Port: ${PORT}`);
+    console.log(`Telegram: ${TELEGRAM_ENABLED ? "ON" : "OFF"}`);
+    console.log(`WhatsApp: ${WA_ENABLED ? "ON" : "OFF"}`);
+    console.log(`MP Webhook: ${mpWebhookHandler ? "ON" : "OFF"}`);
+    if (WA_NOTIFY_PHONE)
+        console.log(`WA Notifications: ${WA_NOTIFY_PHONE}`);
+    console.log(`Health: http://localhost:${PORT}/health`);
+    console.log(`================================\n`);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;AAAA,yBAAuB;AAEvB;;;;;;;;;;GAUG;AAEH,yCAAyC;AACzC,uDAA6C;AAC7C,sDAAqE;AACrE,6CAAoD;AACpD,oDAAsD;AACtD,wDAA+D;AAC/D,6CAA2C;AAE3C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;AAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;AAC7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;AAElE,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAC1D,MAAM,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;AACpE,IAAI,WAAW,GAAuC,IAAI,CAAC;AAE3D,IAAI,gBAAgB,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,0BAAQ,GAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,GACd,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB;IACtC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;AAEtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB;IAC3D,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,SAAS,CAAC;AAEd,MAAM,SAAS,GAAG,UAAU;IAC1B,CAAC,CAAC,IAAA,yCAA4B,EAAC;QAC3B,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;QACjD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAyB;QACtD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;QAC/C,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK;QAC1C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QACtC,aAAa,EAAE,iBAAiB;KACjC,CAAC;IACJ,CAAC,CAAC,IAAI,CAAC;AAET,4DAA4D;AAC5D,8EAA8E;AAC9E,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAEpD,MAAM,gBAAgB,GAA+C,EAAE,CAAC;AAExE,wBAAwB;AACxB,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,0BAAc,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB;QAC/C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAyB;KACrD,CAAC,CAAC;IACH,gBAAgB,CAAC,IAAI,CAAC,IAAA,mCAAqB,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,wBAAwB;AACxB,IAAI,WAAW,IAAI,uBAAuB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC/C,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAG,OAA2F,CAAC;QACtG,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACpC,MAAM,WAAY,CAAC,WAAW,CAC5B,MAAM,EACN,0BAA0B,CAAC,CAAC,kBAAkB,SAAS,CAAC,CAAC,EAAE,EAAE;YAC3D,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uBAAuB;AACvB,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAgB,EAAE,EAAE;IAC/C,MAAM,CAAC,GAAG,OAAqE,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,QAAQ;IAC/B,CAAC,CAAC,IAAA,iCAAoB,EAAC;QACnB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;IACJ,CAAC,CAAC,IAAI,CAAC;AAET,6DAA6D;AAC7D,KAAK,UAAU,gBAAgB,CAC7B,GAAwC,EACxC,GAAQ;IAER,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAiC;QAC9C,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAgB,EAChB,GAAuC;IAEvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAE1B,iBAAiB;IACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG;;;;;;;;;;;;;WAaL,CAAC;QACR,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,eAAe;IACf,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,wBAAW,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,eAAe;IACf,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,CAAC,CAAC,gBAAgB;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,2BAA2B;IAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IACvB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,eAAe,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,eAAe;QAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAe,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC"}

package/dist/shared/formatting.d.ts

@@ -0,0 +1,4 @@
+export declare function statusEmoji(status: string): string;
+export declare function statusLabel(status: string): string;
+export declare function formatMoney(amount: number, currency: string): string;
+export declare function friendlyError(err: unknown): string;

package/dist/shared/formatting.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.statusEmoji = statusEmoji;
+exports.statusLabel = statusLabel;
+exports.formatMoney = formatMoney;
+exports.friendlyError = friendlyError;
+const errors_js_1 = require("../errors.js");
+function statusEmoji(status) {
+    switch (status) {
+        case "approved": return "\u2705";
+        case "pending":
+        case "in_process":
+        case "in_mediation": return "\u23f3";
+        case "rejected":
+        case "cancelled": return "\u274c";
+        case "refunded":
+        case "charged_back": return "\ud83d\udd04";
+        default: return "\u2753";
+    }
+}
+function statusLabel(status) {
+    const labels = {
+        approved: "Aprobado",
+        pending: "Pendiente",
+        in_process: "En proceso",
+        in_mediation: "En mediacion",
+        rejected: "Rechazado",
+        cancelled: "Cancelado",
+        refunded: "Devuelto",
+        charged_back: "Contracargo",
+    };
+    return labels[status] ?? status;
+}
+function formatMoney(amount, currency) {
+    return `$${amount.toLocaleString("es-AR", { minimumFractionDigits: 2, maximumFractionDigits: 2 })} ${currency}`;
+}
+function friendlyError(err) {
+    if (err instanceof errors_js_1.MercadoPagoError) {
+        if (err.isUnauthorized)
+            return "Error de autenticacion. Verifica el token de Mercado Pago.";
+        if (err.isNotFound)
+            return "No se encontro el recurso solicitado. Verifica el ID ingresado.";
+        if (err.isRateLimited)
+            return "Demasiadas solicitudes. Intenta de nuevo en unos minutos.";
+        return `Error de Mercado Pago (${err.status}): ${err.body}`;
+    }
+    if (err instanceof Error)
+        return `Error: ${err.message}`;
+    return "Ocurrio un error inesperado. Intenta de nuevo.";
+}
+//# sourceMappingURL=formatting.js.map

package/dist/shared/formatting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatting.js","sourceRoot":"","sources":["../../src/shared/formatting.ts"],"names":[],"mappings":";;AAEA,kCAYC;AAED,kCAYC;AAED,kCAEC;AAED,sCASC;AA3CD,4CAAgD;AAEhD,SAAgB,WAAW,CAAC,MAAc;IACxC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU,CAAC,CAAC,OAAO,QAAQ,CAAC;QACjC,KAAK,SAAS,CAAC;QACf,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC,CAAC,OAAO,QAAQ,CAAC;QACrC,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC,CAAC,OAAO,QAAQ,CAAC;QAClC,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc,CAAC,CAAC,OAAO,cAAc,CAAC;QAC3C,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc;IACxC,MAAM,MAAM,GAA2B;QACrC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,YAAY;QACxB,YAAY,EAAE,cAAc;QAC5B,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,aAAa;KAC5B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AAClC,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc,EAAE,QAAgB;IAC1D,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;AAClH,CAAC;AAED,SAAgB,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,4BAAgB,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,cAAc;YAAE,OAAO,4DAA4D,CAAC;QAC5F,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,iEAAiE,CAAC;QAC7F,IAAI,GAAG,CAAC,aAAa;YAAE,OAAO,2DAA2D,CAAC;QAC1F,OAAO,0BAA0B,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,OAAO,gDAAgD,CAAC;AAC1D,CAAC"}

package/dist/telegram-bot.d.ts

@@ -0,0 +1,3 @@
+import "dotenv/config";
+import TelegramBot from "node-telegram-bot-api";
+export declare function startBot(): TelegramBot;

package/dist/telegram-bot.js

@@ -0,0 +1,194 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startBot = startBot;
+require("dotenv/config");
+const node_telegram_bot_api_1 = __importDefault(require("node-telegram-bot-api"));
+const index_js_1 = require("./index.js");
+const formatting_js_1 = require("./shared/formatting.js");
+const TELEGRAM_BOT_TOKEN = process.env.TELEGRAM_BOT_TOKEN ?? "";
+const MP_ACCESS_TOKEN = process.env.MERCADO_PAGO_ACCESS_TOKEN ?? "";
+const MP_CURRENCY = process.env.MP_CURRENCY ?? "ARS";
+const MP_SUCCESS_URL = process.env.MP_SUCCESS_URL ?? "";
+// Access control: comma-separated list of allowed Telegram chat IDs
+const ALLOWED_CHAT_IDS = process.env.TELEGRAM_ALLOWED_CHAT_IDS
+    ? new Set(process.env.TELEGRAM_ALLOWED_CHAT_IDS.split(",").map((id) => Number(id.trim())))
+    : null;
+function startBot() {
+    if (!TELEGRAM_BOT_TOKEN) {
+        throw new Error("TELEGRAM_BOT_TOKEN es requerido. Configuralo en las variables de entorno.");
+    }
+    if (!MP_ACCESS_TOKEN) {
+        throw new Error("MERCADO_PAGO_ACCESS_TOKEN es requerido. Configuralo en las variables de entorno.");
+    }
+    const mp = (0, index_js_1.createMercadoPagoTools)(MP_ACCESS_TOKEN);
+    const bot = new node_telegram_bot_api_1.default(TELEGRAM_BOT_TOKEN, { polling: true });
+    function isAuthorized(chatId) {
+        if (!ALLOWED_CHAT_IDS)
+            return true; // No whitelist = allow all (dev mode)
+        return ALLOWED_CHAT_IDS.has(chatId);
+    }
+    bot.onText(/\/start(?:\s|$)/, (msg) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId)) {
+            bot.sendMessage(chatId, `No autorizado. Tu chat ID es: ${chatId}`);
+            return;
+        }
+        bot.sendMessage(chatId, "Hola! Soy tu bot de cobros con Mercado Pago.\n\n" +
+            "Puedo generar links de pago, consultar pagos y hacer devoluciones.\n\n" +
+            "Usa /help para ver los comandos disponibles.");
+    });
+    bot.onText(/\/help(?:\s|$)/, (msg) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId))
+            return;
+        bot.sendMessage(chatId, "Comandos disponibles:\n\n" +
+            "/cobrar <monto> <descripcion> - Genera un link de pago\n" +
+            "  Ejemplo: /cobrar 5000 Servicio de diseno\n\n" +
+            "/pagos - Lista los ultimos 5 pagos\n\n" +
+            "/estado <payment_id> - Consulta el estado de un pago\n\n" +
+            "/devolver <payment_id> [monto] - Devuelve un pago (total o parcial)\n\n" +
+            "/help - Muestra este mensaje");
+    });
+    bot.onText(/\/cobrar(?:\s+(.*))?$/, async (msg, match) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId))
+            return;
+        const args = match?.[1]?.trim();
+        if (!args) {
+            bot.sendMessage(chatId, "Uso: /cobrar <monto> <descripcion>\nEjemplo: /cobrar 5000 Servicio de diseno");
+            return;
+        }
+        const spaceIndex = args.indexOf(" ");
+        if (spaceIndex === -1) {
+            bot.sendMessage(chatId, "Debes incluir un monto y una descripcion.\nEjemplo: /cobrar 5000 Servicio de diseno");
+            return;
+        }
+        const amountStr = args.substring(0, spaceIndex);
+        const description = args.substring(spaceIndex + 1).trim();
+        const amount = Number(amountStr);
+        if (isNaN(amount) || amount <= 0) {
+            bot.sendMessage(chatId, "El monto debe ser un numero positivo.\nEjemplo: /cobrar 5000 Servicio de diseno");
+            return;
+        }
+        if (!description) {
+            bot.sendMessage(chatId, "Debes incluir una descripcion.\nEjemplo: /cobrar 5000 Servicio de diseno");
+            return;
+        }
+        try {
+            const backUrls = MP_SUCCESS_URL
+                ? { success: MP_SUCCESS_URL }
+                : undefined;
+            const result = (await mp.tools.create_payment_preference({
+                title: description,
+                quantity: 1,
+                currency: MP_CURRENCY,
+                unit_price: amount,
+                back_urls: backUrls,
+            }));
+            bot.sendMessage(chatId, `Link de pago creado!\n\n` +
+                `Descripcion: ${description}\n` +
+                `Monto: ${(0, formatting_js_1.formatMoney)(amount, MP_CURRENCY)}\n\n` +
+                `Link de pago:\n${result.init_point}`);
+        }
+        catch (err) {
+            bot.sendMessage(chatId, (0, formatting_js_1.friendlyError)(err));
+        }
+    });
+    bot.onText(/\/pagos(?:\s|$)/, async (msg) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId))
+            return;
+        try {
+            const result = (await mp.tools.search_payments({ limit: 5 }));
+            if (!result.results || result.results.length === 0) {
+                bot.sendMessage(chatId, "No se encontraron pagos recientes.");
+                return;
+            }
+            const lines = result.results.map((p) => {
+                const emoji = (0, formatting_js_1.statusEmoji)(p.status);
+                const label = (0, formatting_js_1.statusLabel)(p.status);
+                const money = (0, formatting_js_1.formatMoney)(p.transaction_amount, p.currency_id ?? MP_CURRENCY);
+                const desc = p.description ?? "Sin descripcion";
+                return `${emoji} #${p.id} - ${label}\n   ${money} - ${desc}`;
+            });
+            bot.sendMessage(chatId, `Ultimos pagos:\n\n${lines.join("\n\n")}`);
+        }
+        catch (err) {
+            bot.sendMessage(chatId, (0, formatting_js_1.friendlyError)(err));
+        }
+    });
+    bot.onText(/\/estado(?:\s+(\S+))?$/, async (msg, match) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId))
+            return;
+        const paymentId = match?.[1]?.trim();
+        if (!paymentId) {
+            bot.sendMessage(chatId, "Uso: /estado <payment_id>\nEjemplo: /estado 123456789");
+            return;
+        }
+        try {
+            const payment = (await mp.tools.get_payment({ payment_id: paymentId }));
+            const emoji = (0, formatting_js_1.statusEmoji)(payment.status);
+            const label = (0, formatting_js_1.statusLabel)(payment.status);
+            const money = (0, formatting_js_1.formatMoney)(payment.transaction_amount, payment.currency_id ?? MP_CURRENCY);
+            const payerEmail = payment.payer?.email ?? "No disponible";
+            bot.sendMessage(chatId, `Pago #${payment.id}\n\n` +
+                `Estado: ${emoji} ${label}\n` +
+                `Monto: ${money}\n` +
+                `Descripcion: ${payment.description ?? "Sin descripcion"}\n` +
+                `Pagador: ${payerEmail}\n` +
+                `Fecha: ${payment.date_created ?? "No disponible"}`);
+        }
+        catch (err) {
+            bot.sendMessage(chatId, (0, formatting_js_1.friendlyError)(err));
+        }
+    });
+    bot.onText(/\/devolver(?:\s+(\S+)(?:\s+(\S+))?)?$/, async (msg, match) => {
+        const chatId = msg.chat.id;
+        if (!isAuthorized(chatId))
+            return;
+        const paymentId = match?.[1]?.trim();
+        if (!paymentId) {
+            bot.sendMessage(chatId, "Uso: /devolver <payment_id> [monto]\n" +
+                "Ejemplo devolucion total: /devolver 123456789\n" +
+                "Ejemplo devolucion parcial: /devolver 123456789 1500");
+            return;
+        }
+        const amountStr = match?.[2]?.trim();
+        let amount;
+        if (amountStr) {
+            amount = Number(amountStr);
+            if (isNaN(amount) || amount <= 0) {
+                bot.sendMessage(chatId, "El monto de devolucion debe ser un numero positivo.");
+                return;
+            }
+        }
+        try {
+            const result = (await mp.tools.create_refund({
+                payment_id: paymentId,
+                amount,
+            }));
+            const refundType = amount ? "parcial" : "total";
+            bot.sendMessage(chatId, `Devolucion ${refundType} realizada!\n\n` +
+                `ID de devolucion: ${result.id}\n` +
+                `Pago: #${paymentId}\n` +
+                `Monto devuelto: $${result.amount}`);
+        }
+        catch (err) {
+            bot.sendMessage(chatId, (0, formatting_js_1.friendlyError)(err));
+        }
+    });
+    console.log("Bot de Telegram iniciado correctamente.");
+    return bot;
+}
+// Auto-start when run directly
+const isMain = typeof require !== "undefined"
+    ? require.main === module
+    : process.argv[1]?.includes("telegram-bot");
+if (isMain) {
+    startBot();
+}
+//# sourceMappingURL=telegram-bot.js.map

package/dist/telegram-bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram-bot.js","sourceRoot":"","sources":["../src/telegram-bot.ts"],"names":[],"mappings":";;;;;AAeA,4BAuOC;AAtPD,yBAAuB;AACvB,kFAAgD;AAChD,yCAAoD;AACpD,0DAA8F;AAE9F,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;AAChE,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;AACpE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC;AACrD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;AAExD,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB;IAC5D,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,IAAI,CAAC;AAET,SAAgB,QAAQ;IACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,iCAAsB,EAAC,eAAe,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,+BAAW,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,SAAS,YAAY,CAAC,MAAc;QAClC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,CAAC,sCAAsC;QAC1E,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,iCAAiC,MAAM,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,WAAW,CACb,MAAM,EACN,kDAAkD;YAChD,wEAAwE;YACxE,8CAA8C,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO;QAClC,GAAG,CAAC,WAAW,CACb,MAAM,EACN,2BAA2B;YACzB,0DAA0D;YAC1D,gDAAgD;YAChD,wCAAwC;YACxC,0DAA0D;YAC1D,yEAAyE;YACzE,8BAA8B,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAEhC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,WAAW,CACb,MAAM,EACN,8EAA8E,CAC/E,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,WAAW,CACb,MAAM,EACN,qFAAqF,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAEjC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,iFAAiF,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,0EAA0E,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,cAAc;gBAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;gBACvD,KAAK,EAAE,WAAW;gBAClB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAmE,CAAC;YAEtE,GAAG,CAAC,WAAW,CACb,MAAM,EACN,0BAA0B;gBACxB,gBAAgB,WAAW,IAAI;gBAC/B,UAAU,IAAA,2BAAW,EAAC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAChD,kBAAkB,MAAM,CAAC,UAAU,EAAE,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAA,6BAAa,EAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAS3D,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC;gBAC9E,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,IAAI,iBAAiB,CAAC;gBAChD,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,EAAE,MAAM,KAAK,QAAQ,KAAK,MAAM,IAAI,EAAE,CAAC;YAC/D,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,WAAW,CACb,MAAM,EACN,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAA,6BAAa,EAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO;QAClC,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAErC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,uDAAuD,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAQrE,CAAC;YAEF,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC;YAC1F,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,eAAe,CAAC;YAE3D,GAAG,CAAC,WAAW,CACb,MAAM,EACN,SAAS,OAAO,CAAC,EAAE,MAAM;gBACvB,WAAW,KAAK,IAAI,KAAK,IAAI;gBAC7B,UAAU,KAAK,IAAI;gBACnB,gBAAgB,OAAO,CAAC,WAAW,IAAI,iBAAiB,IAAI;gBAC5D,YAAY,UAAU,IAAI;gBAC1B,UAAU,OAAO,CAAC,YAAY,IAAI,eAAe,EAAE,CACtD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAA,6BAAa,EAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,uCAAuC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO;QAClC,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAErC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,WAAW,CACb,MAAM,EACN,uCAAuC;gBACrC,iDAAiD;gBACjD,sDAAsD,CACzD,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACrC,IAAI,MAA0B,CAAC;QAE/B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC3C,UAAU,EAAE,SAAS;gBACrB,MAAM;aACP,CAAC,CAAmC,CAAC;YAEtC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,GAAG,CAAC,WAAW,CACb,MAAM,EACN,cAAc,UAAU,iBAAiB;gBACvC,qBAAqB,MAAM,CAAC,EAAE,IAAI;gBAClC,UAAU,SAAS,IAAI;gBACvB,oBAAoB,MAAM,CAAC,MAAM,EAAE,CACtC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAA,6BAAa,EAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+BAA+B;AAC/B,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,WAAW;IAC5B,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;IACzB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;AAEhD,IAAI,MAAM,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;AACb,CAAC"}

package/dist/webhook.d.ts

@@ -0,0 +1,6 @@
+export interface WebhookConfig {
+    accessToken: string;
+    onPayment: (payment: unknown) => void | Promise<void>;
+    secret?: string;
+}
+export declare function createWebhookHandler(config: WebhookConfig): (request: Request) => Promise<Response>;

package/dist/webhook.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookHandler = createWebhookHandler;
+const node_crypto_1 = require("node:crypto");
+const client_js_1 = require("./client.js");
+function validateSignature(secret, dataId, xSignature, xRequestId) {
+    const parts = xSignature.split(",");
+    let ts = "";
+    let hash = "";
+    for (const part of parts) {
+        const [key, value] = part.trim().split("=", 2);
+        if (key === "ts") {
+            ts = value;
+        }
+        else if (key === "v1") {
+            hash = value;
+        }
+    }
+    if (!ts || !hash) {
+        return false;
+    }
+    const template = `id:${dataId};request-id:${xRequestId};ts:${ts};`;
+    const expected = (0, node_crypto_1.createHmac)("sha256", secret).update(template).digest("hex");
+    try {
+        return (0, node_crypto_1.timingSafeEqual)(Buffer.from(expected, "hex"), Buffer.from(hash, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+function createWebhookHandler(config) {
+    const client = new client_js_1.MercadoPagoClient(config.accessToken);
+    return async (request) => {
+        if (request.method !== "POST") {
+            return new Response("Method not allowed", { status: 405 });
+        }
+        let body;
+        try {
+            body = (await request.json());
+        }
+        catch {
+            return new Response("Bad request: invalid JSON", { status: 400 });
+        }
+        if (!body || typeof body !== "object") {
+            return new Response("Bad request: expected JSON object", { status: 400 });
+        }
+        // Non-payment notification types are acknowledged but ignored
+        if (body.type !== "payment") {
+            return new Response("OK", { status: 200 });
+        }
+        const dataId = body.data?.id;
+        if (!dataId || typeof dataId !== "string") {
+            return new Response("Bad request: missing data.id", { status: 400 });
+        }
+        // Validate signature if secret is configured
+        if (config.secret) {
+            const xSignature = request.headers.get("x-signature") ?? "";
+            const xRequestId = request.headers.get("x-request-id") ?? "";
+            if (!xSignature || !validateSignature(config.secret, dataId, xSignature, xRequestId)) {
+                return new Response("Invalid signature", { status: 401 });
+            }
+        }
+        try {
+            if (!/^\d+$/.test(dataId)) {
+                return new Response("Bad request: invalid payment ID format", { status: 400 });
+            }
+            const payment = await client.get(`/v1/payments/${dataId}`);
+            await config.onPayment(payment);
+            return new Response("OK", { status: 200 });
+        }
+        catch (error) {
+            console.error("[webhook] Error processing payment:", error);
+            return new Response("Internal server error", { status: 500 });
+        }
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":";;AA+CA,oDAmDC;AAlGD,6CAA0D;AAC1D,2CAAgD;AAahD,SAAS,iBAAiB,CACxB,MAAc,EACd,MAAc,EACd,UAAkB,EAClB,UAAkB;IAElB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;aAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,eAAe,UAAU,OAAO,EAAE,GAAG,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7E,IAAI,CAAC;QACH,OAAO,IAAA,6BAAe,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAqB;IACxD,MAAM,MAAM,GAAG,IAAI,6BAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEzD,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,QAAQ,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAE7D,IAAI,CAAC,UAAU,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;gBACrF,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,QAAQ,CAAC,wCAAwC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}