kasy-cli 1.2.1

package/lib/scaffold/backends/supabase/edge-functions/llm-chat/index.ts

@@ -0,0 +1,156 @@
+/**
+ * Supabase Edge Function: LLM Chat Proxy (streaming)
+ *
+ * Receives {message, history} from the Flutter app and streams the response
+ * back as Server-Sent Events (SSE). The API key never leaves the server.
+ *
+ * Secrets required (set via `supabase secrets set`):
+ *   - LLM_API_KEY: API key for OpenAI or Gemini
+ *   - LLM_PROVIDER: "openai" (default) or "gemini"
+ *   - LLM_SYSTEM_PROMPT: System prompt for the agent (optional)
+ *
+ * App dart-define:
+ *   - LLM_CHAT_ENDPOINT: https://<project-ref>.supabase.co/functions/v1/llm-chat
+ *
+ * Deploy: supabase functions deploy llm-chat --no-verify-jwt
+ */
+
+const LLM_API_KEY = Deno.env.get("LLM_API_KEY") ?? "";
+const LLM_PROVIDER = Deno.env.get("LLM_PROVIDER") ?? "openai";
+const LLM_SYSTEM_PROMPT = Deno.env.get("LLM_SYSTEM_PROMPT") ?? "";
+const SUPABASE_URL = Deno.env.get("SUPABASE_URL") ?? "";
+const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
+
+const SSE_HEADERS = {
+  "Content-Type": "text/event-stream",
+  "Cache-Control": "no-cache",
+  "Access-Control-Allow-Origin": "*",
+};
+
+const CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Content-Type, Authorization",
+};
+
+interface ChatMessage {
+  role: "user" | "assistant";
+  content: string;
+}
+
+// Pipes the OpenAI SSE stream directly to the Deno response.
+function streamOpenAI(message: string, history: ChatMessage[]): Promise<Response> {
+  const messages: { role: string; content: string }[] = [];
+  if (LLM_SYSTEM_PROMPT) messages.push({ role: "system", content: LLM_SYSTEM_PROMPT });
+  messages.push(...history);
+  messages.push({ role: "user", content: message });
+
+  return fetch("https://api.openai.com/v1/chat/completions", {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${LLM_API_KEY}`,
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify({ model: "gpt-4o-mini", messages, stream: true }),
+  }).then((upstream) => {
+    if (!upstream.ok) {
+      return upstream.text().then((t) => {
+        throw new Error(`OpenAI ${upstream.status}: ${t}`);
+      });
+    }
+    // Pipe the upstream SSE body directly to the Flutter client
+    return new Response(upstream.body, { headers: SSE_HEADERS });
+  });
+}
+
+// Pipes the Gemini SSE stream directly to the Deno response.
+function streamGemini(message: string, history: ChatMessage[]): Promise<Response> {
+  const contents = [
+    ...history.map((m) => ({
+      role: m.role === "assistant" ? "model" : "user",
+      parts: [{ text: m.content }],
+    })),
+    { role: "user", parts: [{ text: message }] },
+  ];
+
+  const body: Record<string, unknown> = { contents };
+  if (LLM_SYSTEM_PROMPT) {
+    body.systemInstruction = { parts: [{ text: LLM_SYSTEM_PROMPT }] };
+  }
+
+  // alt=sse makes Gemini return the same SSE format as OpenAI
+  return fetch(
+    `https://generativelanguage.googleapis.com/v1beta/models/gemini-1.5-flash:streamGenerateContent?key=${LLM_API_KEY}&alt=sse`,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+    }
+  ).then((upstream) => {
+    if (!upstream.ok) {
+      return upstream.text().then((t) => {
+        throw new Error(`Gemini ${upstream.status}: ${t}`);
+      });
+    }
+    return new Response(upstream.body, { headers: SSE_HEADERS });
+  });
+}
+
+async function verifySupabaseJwt(req: Request): Promise<boolean> {
+  const authHeader = req.headers.get("Authorization") ?? "";
+  const token = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
+  if (!token || !SUPABASE_URL || !SUPABASE_SERVICE_ROLE_KEY) return false;
+  try {
+    const { createClient } = await import("https://esm.sh/@supabase/supabase-js@2.47.10");
+    const admin = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
+    const { data: { user }, error } = await admin.auth.getUser(token);
+    return !error && user != null;
+  } catch {
+    return false;
+  }
+}
+
+Deno.serve(async (req: Request) => {
+  if (req.method === "OPTIONS") {
+    return new Response(null, { status: 204, headers: CORS_HEADERS });
+  }
+
+  if (req.method !== "POST") {
+    return Response.json({ error: "Method not allowed" }, { status: 405 });
+  }
+
+  const authenticated = await verifySupabaseJwt(req);
+  if (!authenticated) {
+    return Response.json({ error: "Unauthorized" }, { status: 401 });
+  }
+
+  let body: { message?: string; history?: ChatMessage[] };
+  try {
+    body = await req.json();
+  } catch {
+    return Response.json({ error: "Invalid JSON" }, { status: 400 });
+  }
+
+  const { message, history = [] } = body;
+  if (!message) {
+    return Response.json({ error: "Missing message" }, { status: 400 });
+  }
+
+  if (!LLM_API_KEY) {
+    return Response.json(
+      { error: "LLM_API_KEY not configured. Run: supabase secrets set LLM_API_KEY=..." },
+      { status: 500 }
+    );
+  }
+
+  try {
+    return LLM_PROVIDER === "gemini"
+      ? await streamGemini(message, history)
+      : await streamOpenAI(message, history);
+  } catch (err) {
+    console.error("[llm-chat]", err);
+    // Send error as SSE event so the Flutter client can surface it
+    const errorEvent = `data: ${JSON.stringify({ error: "LLM request failed" })}\n\n`;
+    return new Response(errorEvent, { headers: SSE_HEADERS });
+  }
+});

package/lib/scaffold/backends/supabase/edge-functions/meta-track-event/index.ts

@@ -0,0 +1,292 @@
+/**
+ * Supabase Edge Function: Meta Conversions API — Generic Event Tracker
+ *
+ * Called by the Flutter app (authenticated via Supabase JWT) to send any
+ * Meta Conversions API event server-to-server. This mirrors the MetaAdsApi
+ * callable Cloud Functions available in the Firebase backend.
+ *
+ * Typical use-cases:
+ *   - CompleteRegistration  → call on user sign-up
+ *   - MobileAppInstall      → call on first app launch
+ *   - Custom events         → achieve level, spend credits, etc.
+ *
+ * Subscription events (Subscribe, StartTrial, Purchase) are handled
+ * automatically by the revenuecat-webhook edge function; do NOT duplicate
+ * them here.
+ *
+ * Secrets required (set via `supabase secrets set`):
+ *   - META_ACCESS_TOKEN  : Meta Marketing API system user access token
+ *   - META_DATASET_ID    : Meta Conversions API dataset ID (Pixel ID)
+ *
+ * Request (POST, authenticated):
+ *   Authorization: Bearer <supabase-user-jwt>
+ *   Content-Type: application/json
+ *   {
+ *     "event_name": "CompleteRegistration",   // required – any Meta event name
+ *     "custom_data": { "key": "value" }       // optional
+ *   }
+ *
+ * The function resolves device data automatically from the `devices` table
+ * (populated by the Flutter app via DeviceApi). If no device row exists yet,
+ * the event is sent with minimal user data only.
+ *
+ * @see https://developers.facebook.com/docs/marketing-api/conversions-api/app-events/
+ */
+
+import { createClient } from "https://esm.sh/@supabase/supabase-js@2.47.10";
+
+// ── Supported event names (mirrors MetaEventType from Firebase) ──────────────
+
+export const MetaEventType = {
+  COMPLETE_REGISTRATION: "CompleteRegistration",
+  MOBILE_APP_INSTALL: "MobileAppInstall",
+  VIEW_CONTENT: "ViewContent",
+  ACHIEVE_LEVEL: "AchieveLevel",
+  UNLOCK_ACHIEVEMENT: "UnlockAchievement",
+  SPEND_CREDITS: "SpendCredits",
+  RATE: "Rate",
+  SEARCH: "Search",
+  AD_IMPRESSION: "AdImpression",
+  AD_CLICK: "AdClick",
+} as const;
+
+// ── Types ────────────────────────────────────────────────────────────────────
+
+interface TrackEventRequest {
+  event_name: string;
+  custom_data?: Record<string, string | number>;
+}
+
+interface DeviceRow {
+  operatingSystem?: string;
+  extra_data: Record<string, string> | null;
+}
+
+interface UserRow {
+  email?: string | null;
+}
+
+// ── Helpers ──────────────────────────────────────────────────────────────────
+
+async function hashEmail(email: string): Promise<string> {
+  const normalized = email.toLowerCase().trim();
+  const data = new TextEncoder().encode(normalized);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+  const hashArray = Array.from(new Uint8Array(hashBuffer));
+  return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+function buildExtinfo(extra: Record<string, string>, os: string): string[] {
+  return [
+    os.toLowerCase() === "android" ? "a2" : "i2",
+    extra.appPackageName ?? "",
+    extra.appVersion ?? "",
+    extra.appLongVersion ?? "",
+    extra.osVersion ?? "",
+    extra.deviceModel ?? "",
+    extra.deviceLocale ?? "en_US",
+    extra.timezone ?? "",
+    extra.carrier ?? "",
+    extra.screenWidth ?? "",
+    extra.screenHeight ?? "",
+    extra.screenDensity ?? "",
+    extra.cpuCores ?? "",
+    extra.storageSize ?? "",
+    extra.freeStorage ?? "",
+    extra.deviceTimezone ?? "",
+  ];
+}
+
+function generateEventId(): string {
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+}
+
+async function sendMetaEvent(
+  eventName: string,
+  userId: string,
+  userEmail: string | null | undefined,
+  device: DeviceRow | null,
+  customData: Record<string, string | number> = {},
+): Promise<void> {
+  const metaToken = Deno.env.get("META_ACCESS_TOKEN");
+  const datasetId = Deno.env.get("META_DATASET_ID");
+
+  if (!metaToken || !datasetId) {
+    console.log("[meta-track] META_ACCESS_TOKEN or META_DATASET_ID not configured — skipping");
+    return;
+  }
+
+  const extra = (device?.extra_data ?? {}) as Record<string, string>;
+  const os = device?.operatingSystem ?? "android";
+  const anonymousFbId = extra.anonymousFbId ?? userId; // fallback to user ID when FB ID unavailable
+
+  const userData: Record<string, string | string[]> = {
+    anon_id: anonymousFbId,
+  };
+  if (userEmail) userData.em = [await hashEmail(userEmail)];
+  if (extra.mobileAdvertiserId) userData.madid = extra.mobileAdvertiserId;
+  if (extra.clientIpAddress) userData.client_ip_address = extra.clientIpAddress;
+
+  const extinfo = buildExtinfo(extra, os);
+  const hasAdvertiserId = Boolean(extra.mobileAdvertiserId);
+
+  const appData: Record<string, unknown> = {
+    advertiser_tracking_enabled: hasAdvertiserId ? 1 : 0,
+    application_tracking_enabled: hasAdvertiserId ? 1 : 0,
+    extinfo,
+  };
+
+  const serverEvent = {
+    event_name: eventName,
+    event_time: Math.floor(Date.now() / 1000),
+    action_source: "app",
+    event_id: generateEventId(),
+    user_data: userData,
+    custom_data: customData,
+    app_data: appData,
+  };
+
+  const META_API_VERSION = "v24.0";
+  const url = `https://graph.facebook.com/${META_API_VERSION}/${datasetId}/events`;
+
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${metaToken}`,
+    },
+    body: JSON.stringify({ data: [serverEvent] }),
+  });
+
+  if (!response.ok) {
+    const errorText = await response.text();
+    throw new Error(`Meta API error: ${response.status} ${response.statusText} - ${errorText}`);
+  }
+
+  const result = await response.json();
+  console.log(`[meta-track] ${eventName} sent:`, JSON.stringify(result));
+}
+
+// ── CORS headers ─────────────────────────────────────────────────────────────
+
+const corsHeaders = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Authorization, Content-Type",
+};
+
+// ── Main handler ─────────────────────────────────────────────────────────────
+
+Deno.serve(async (req: Request) => {
+  if (req.method === "OPTIONS") {
+    return new Response(null, { status: 204, headers: corsHeaders });
+  }
+
+  if (req.method !== "POST") {
+    return new Response(JSON.stringify({ error: "Method not allowed" }), {
+      status: 405,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  // ── Auth: require valid Supabase JWT ──────────────────────────────────────
+
+  const authHeader = req.headers.get("Authorization");
+  if (!authHeader?.startsWith("Bearer ")) {
+    return new Response(JSON.stringify({ error: "Missing or invalid Authorization header" }), {
+      status: 401,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  const supabaseUrl = Deno.env.get("SUPABASE_URL");
+  const supabaseAnonKey = Deno.env.get("SUPABASE_ANON_KEY");
+  if (!supabaseUrl || !supabaseAnonKey) {
+    return new Response(JSON.stringify({ error: "Server configuration error" }), {
+      status: 500,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  // Use anon key + user JWT to get the authenticated user
+  const userClient = createClient(supabaseUrl, supabaseAnonKey, {
+    global: { headers: { Authorization: authHeader } },
+  });
+
+  const { data: { user }, error: authError } = await userClient.auth.getUser();
+  if (authError || !user) {
+    return new Response(JSON.stringify({ error: "Unauthenticated" }), {
+      status: 401,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  // ── Parse body ────────────────────────────────────────────────────────────
+
+  let body: TrackEventRequest;
+  try {
+    body = await req.json();
+  } catch {
+    return new Response(JSON.stringify({ error: "Invalid JSON" }), {
+      status: 400,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  const { event_name, custom_data } = body;
+  if (!event_name || typeof event_name !== "string") {
+    return new Response(JSON.stringify({ error: "event_name is required" }), {
+      status: 400,
+      headers: { "Content-Type": "application/json", ...corsHeaders },
+    });
+  }
+
+  // ── Fetch user + device data via service role ─────────────────────────────
+
+  const serviceRoleKey = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY");
+  const adminClient = createClient(supabaseUrl, serviceRoleKey!);
+
+  const [userResult, deviceResult] = await Promise.all([
+    adminClient.from("users").select("email").eq("id", user.id).maybeSingle(),
+    adminClient
+      .from("devices")
+      .select("operatingSystem, extra_data")
+      .eq("user_id", user.id)
+      .order("last_update_date", { ascending: false })
+      .limit(1)
+      .maybeSingle(),
+  ]);
+
+  const userRow = userResult.data as UserRow | null;
+  const deviceRow = deviceResult.data as DeviceRow | null;
+
+  if (deviceResult.error) {
+    console.warn("[meta-track] device fetch error (non-fatal):", deviceResult.error);
+  }
+
+  // ── Send event ────────────────────────────────────────────────────────────
+
+  try {
+    await sendMetaEvent(
+      event_name,
+      user.id,
+      userRow?.email,
+      deviceRow,
+      custom_data,
+    );
+  } catch (e) {
+    console.error("[meta-track] error sending event:", e);
+    return new Response(
+      JSON.stringify({ error: e instanceof Error ? e.message : "Failed to send Meta event" }),
+      {
+        status: 500,
+        headers: { "Content-Type": "application/json", ...corsHeaders },
+      },
+    );
+  }
+
+  return new Response(JSON.stringify({ ok: true }), {
+    status: 200,
+    headers: { "Content-Type": "application/json", ...corsHeaders },
+  });
+});

package/lib/scaffold/backends/supabase/edge-functions/revenuecat-webhook/README.md

@@ -0,0 +1,30 @@
+# RevenueCat Webhook + Meta Ads
+
+Supabase Edge Function que recebe eventos do RevenueCat, sincroniza assinaturas no banco e envia conversões para a Meta Conversions API.
+
+## Pré-requisitos
+
+- Tabela `subscriptions` com colunas: `user_id`, `status`, `creation_date`, `last_update_date`, `period_end_date`, `sku_id`, `offer_id`
+- Tabela `devices` com `extra_data` (JSONB) contendo `anonymousFbId` para Meta Ads (enviado pelo app Flutter)
+
+## Secrets
+
+Configure antes do deploy:
+
+```bash
+supabase secrets set REVENUECAT_WEBHOOK_KEY="Bearer seu_token_do_revenuecat"
+supabase secrets set META_ACCESS_TOKEN="seu_token_meta"
+supabase secrets set META_DATASET_ID="seu_pixel_id"
+```
+
+## Deploy
+
+```bash
+supabase functions deploy revenuecat-webhook
+```
+
+## Configuração no RevenueCat
+
+1. RevenueCat Dashboard → Project → Integrations → Webhooks
+2. URL: `https://<seu-projeto>.supabase.co/functions/v1/revenuecat-webhook`
+3. Authorization: o mesmo valor de `REVENUECAT_WEBHOOK_KEY` (ex: `Bearer xxx`)