n8n-nodes-zap-api 0.1.0

package/README.md

@@ -0,0 +1,37 @@
+# n8n-nodes-zap-api
+
+Community node da [ZAP-API](https://zap-api.tech) (WhatsApp) para o [n8n](https://n8n.io).
+
+## Instalação
+
+n8n → **Settings → Community Nodes → Install** → `n8n-nodes-zap-api`.
+
+## Credential
+
+Crie uma credential **ZAP-API API**: `Base URL` (default `https://api.zap-api.tech/v1`)
+e seu **API Token** (`tk_...`, do painel → Instâncias). Ao salvar, a credential é
+validada com um `GET /instances`.
+
+## Nodes
+
+- **ZAP-API** (ação): operação *Send* — envia texto / imagem / áudio / vídeo / documento
+  (`type` + `mediaUrl`).
+- **ZAP-API Trigger**: inicia o workflow em eventos (ex: `message.received`,
+  `message.status`, `instance.connected`, ...). Ao **ativar**, registra o webhook da
+  instância na URL do n8n e guarda o secret HMAC; ao **desativar**, limpa o webhook.
+  Cada evento recebido é verificado via `X-ZapAPI-Signature-256` (HMAC) — pode desligar
+  em *Verify Signature*, mas não é recomendado em produção.
+
+### Requisitos do Trigger
+
+- A instância precisa de uma **URL pública HTTPS** (n8n Cloud ou self-hosted com ingress
+  público) — webhooks **não** são entregues a IP privado/localhost (proteção anti-SSRF).
+- **Atenção:** ativar o trigger **sobrescreve** um webhook já configurado na instância
+  (uma URL por instância).
+
+## Publicação (mantenedor)
+
+```bash
+cd n8n-node && npm run build && npm publish --access public
+```
+Requer `npm login` com permissão no pacote.

package/dist/credentials/ZapApiApi.credentials.d.ts

@@ -0,0 +1,9 @@
+import type { IAuthenticateGeneric, ICredentialTestRequest, ICredentialType, INodeProperties } from "n8n-workflow";
+export declare class ZapApiApi implements ICredentialType {
+    name: string;
+    displayName: string;
+    documentationUrl: string;
+    properties: INodeProperties[];
+    authenticate: IAuthenticateGeneric;
+    test: ICredentialTestRequest;
+}

package/dist/credentials/ZapApiApi.credentials.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZapApiApi = void 0;
+class ZapApiApi {
+    constructor() {
+        this.name = "zapApiApi";
+        this.displayName = "ZAP-API API";
+        this.documentationUrl = "https://zap-api.tech/dashboard/docs";
+        this.properties = [
+            {
+                displayName: "Base URL",
+                name: "baseUrl",
+                type: "string",
+                default: "https://api.zap-api.tech/v1",
+                description: "URL base da API (inclui /v1)",
+            },
+            {
+                displayName: "API Token",
+                name: "apiToken",
+                type: "string",
+                typeOptions: { password: true },
+                default: "",
+                required: true,
+                description: "Token da instância (tk_...). Painel ZAP-API → Instâncias.",
+            },
+        ];
+        this.authenticate = {
+            type: "generic",
+            properties: {
+                headers: { Authorization: "=Bearer {{$credentials.apiToken}}" },
+            },
+        };
+        // Valida a chave ao salvar: GET /instances deve responder 2xx.
+        this.test = {
+            request: {
+                baseURL: "={{$credentials.baseUrl}}",
+                url: "/instances",
+            },
+        };
+    }
+}
+exports.ZapApiApi = ZapApiApi;
+//# sourceMappingURL=ZapApiApi.credentials.js.map

package/dist/credentials/ZapApiApi.credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ZapApiApi.credentials.js","sourceRoot":"","sources":["../../credentials/ZapApiApi.credentials.ts"],"names":[],"mappings":";;;AAOA,MAAa,SAAS;IAAtB;QACE,SAAI,GAAG,WAAW,CAAC;QAEnB,gBAAW,GAAG,aAAa,CAAC;QAE5B,qBAAgB,GAAG,qCAAqC,CAAC;QAEzD,eAAU,GAAsB;YAC9B;gBACE,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,6BAA6B;gBACtC,WAAW,EAAE,8BAA8B;aAC5C;YACD;gBACE,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,2DAA2D;aACzE;SACF,CAAC;QAEF,iBAAY,GAAyB;YACnC,IAAI,EAAE,SAAS;YACf,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,aAAa,EAAE,mCAAmC,EAAE;aAChE;SACF,CAAC;QAEF,+DAA+D;QAC/D,SAAI,GAA2B;YAC7B,OAAO,EAAE;gBACP,OAAO,EAAE,2BAA2B;gBACpC,GAAG,EAAE,YAAY;aAClB;SACF,CAAC;IACJ,CAAC;CAAA;AAxCD,8BAwCC"}

package/dist/nodes/ZapApi/ZapApi.node.d.ts

@@ -0,0 +1,10 @@
+import type { INodeType, INodeTypeDescription } from "n8n-workflow";
+import { getInstances } from "../shared/loadOptions";
+export declare class ZapApi implements INodeType {
+    description: INodeTypeDescription;
+    methods: {
+        loadOptions: {
+            getInstances: typeof getInstances;
+        };
+    };
+}

package/dist/nodes/ZapApi/ZapApi.node.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZapApi = void 0;
+const loadOptions_1 = require("../shared/loadOptions");
+class ZapApi {
+    constructor() {
+        this.description = {
+            displayName: "ZAP-API",
+            name: "zapApi",
+            icon: "file:zapapi.svg",
+            group: ["output"],
+            version: 1,
+            subtitle: '={{"Enviar para " + $parameter["phone"]}}',
+            description: "Enviar mensagens WhatsApp via ZAP-API",
+            defaults: { name: "ZAP-API" },
+            inputs: ["main"],
+            outputs: ["main"],
+            credentials: [{ name: "zapApiApi", required: true }],
+            requestDefaults: {
+                baseURL: "={{$credentials.baseUrl}}",
+                headers: { "Content-Type": "application/json" }
+            },
+            properties: [
+                { displayName: "Resource", name: "resource", type: "hidden", default: "message" },
+                {
+                    displayName: "Operation",
+                    name: "operation",
+                    type: "options",
+                    noDataExpression: true,
+                    options: [
+                        {
+                            name: "Send",
+                            value: "send",
+                            action: "Send a message",
+                            routing: {
+                                request: {
+                                    method: "POST",
+                                    url: "=/instances/{{$parameter.instanceId}}/send"
+                                }
+                            }
+                        }
+                    ],
+                    default: "send"
+                },
+                {
+                    displayName: "Instance Name or ID",
+                    name: "instanceId",
+                    type: "options",
+                    typeOptions: { loadOptionsMethod: "getInstances" },
+                    default: "",
+                    required: true,
+                    description: "Escolha a instância. Choose from the list, or specify an ID using an expression."
+                },
+                {
+                    displayName: "Phone",
+                    name: "phone",
+                    type: "string",
+                    default: "",
+                    required: true,
+                    placeholder: "5511999999999",
+                    routing: { send: { type: "body", property: "phone" } }
+                },
+                {
+                    displayName: "Type",
+                    name: "type",
+                    type: "options",
+                    options: [
+                        { name: "Text", value: "text" },
+                        { name: "Image", value: "image" },
+                        { name: "Audio", value: "audio" },
+                        { name: "Video", value: "video" },
+                        { name: "Document", value: "document" }
+                    ],
+                    default: "text",
+                    routing: { send: { type: "body", property: "type" } }
+                },
+                {
+                    displayName: "Text",
+                    name: "text",
+                    type: "string",
+                    typeOptions: { rows: 3 },
+                    default: "",
+                    displayOptions: { show: { type: ["text"] } },
+                    routing: { send: { type: "body", property: "text" } }
+                },
+                {
+                    displayName: "Media URL",
+                    name: "mediaUrl",
+                    type: "string",
+                    default: "",
+                    placeholder: "https://exemplo.com/arquivo.pdf",
+                    displayOptions: { show: { type: ["image", "audio", "video", "document"] } },
+                    routing: { send: { type: "body", property: "mediaUrl" } }
+                },
+                {
+                    displayName: "Caption",
+                    name: "caption",
+                    type: "string",
+                    default: "",
+                    displayOptions: { show: { type: ["image", "video", "document"] } },
+                    routing: { send: { type: "body", property: "caption" } }
+                },
+                {
+                    displayName: "File Name",
+                    name: "fileName",
+                    type: "string",
+                    default: "",
+                    displayOptions: { show: { type: ["document"] } },
+                    routing: { send: { type: "body", property: "fileName" } }
+                }
+            ]
+        };
+        this.methods = {
+            loadOptions: { getInstances: loadOptions_1.getInstances }
+        };
+    }
+}
+exports.ZapApi = ZapApi;
+//# sourceMappingURL=ZapApi.node.js.map

package/dist/nodes/ZapApi/ZapApi.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ZapApi.node.js","sourceRoot":"","sources":["../../../nodes/ZapApi/ZapApi.node.ts"],"names":[],"mappings":";;;AACA,uDAAqD;AAErD,MAAa,MAAM;IAAnB;QACE,gBAAW,GAAyB;YAClC,WAAW,EAAE,SAAS;YACtB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,2CAA2C;YACrD,WAAW,EAAE,uCAAuC;YACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC7B,MAAM,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpD,eAAe,EAAE;gBACf,OAAO,EAAE,2BAA2B;gBACpC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD;YACD,UAAU,EAAE;gBACV,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;gBACjF;oBACE,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,SAAS;oBACf,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,KAAK,EAAE,MAAM;4BACb,MAAM,EAAE,gBAAgB;4BACxB,OAAO,EAAE;gCACP,OAAO,EAAE;oCACP,MAAM,EAAE,MAAM;oCACd,GAAG,EAAE,4CAA4C;iCAClD;6BACF;yBACF;qBACF;oBACD,OAAO,EAAE,MAAM;iBAChB;gBACD;oBACE,WAAW,EAAE,qBAAqB;oBAClC,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;oBAClD,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,WAAW,EACT,kFAAkF;iBACrF;gBACD;oBACE,WAAW,EAAE,OAAO;oBACpB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,eAAe;oBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;iBACvD;gBACD;oBACE,WAAW,EAAE,MAAM;oBACnB,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;wBAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;wBACjC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;wBACjC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;wBACjC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;qBACxC;oBACD,OAAO,EAAE,MAAM;oBACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;iBACtD;gBACD;oBACE,WAAW,EAAE,MAAM;oBACnB,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;oBACxB,OAAO,EAAE,EAAE;oBACX,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;oBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;iBACtD;gBACD;oBACE,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,iCAAiC;oBAC9C,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE;oBAC3E,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE;iBAC1D;gBACD;oBACE,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE;oBAClE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;iBACzD;gBACD;oBACE,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;oBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE;iBAC1D;aACF;SACF,CAAC;QAEF,YAAO,GAAG;YACR,WAAW,EAAE,EAAE,YAAY,EAAZ,0BAAY,EAAE;SAC9B,CAAC;IACJ,CAAC;CAAA;AAhHD,wBAgHC"}

package/dist/nodes/ZapApi/zapapi.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24"><rect width="24" height="24" rx="5" fill="#22c55e"/><path d="M12 5a7 7 0 0 0-6 10.6L5 19l3.5-1A7 7 0 1 0 12 5z" fill="#fff"/></svg>

package/dist/nodes/ZapApiTrigger/ZapApiTrigger.node.d.ts

@@ -0,0 +1,18 @@
+import type { IHookFunctions, INodeType, INodeTypeDescription, IWebhookFunctions, IWebhookResponseData } from "n8n-workflow";
+import { getInstances } from "../shared/loadOptions";
+export declare class ZapApiTrigger implements INodeType {
+    description: INodeTypeDescription;
+    methods: {
+        loadOptions: {
+            getInstances: typeof getInstances;
+        };
+    };
+    webhookMethods: {
+        default: {
+            checkExists(this: IHookFunctions): Promise<boolean>;
+            create(this: IHookFunctions): Promise<boolean>;
+            delete(this: IHookFunctions): Promise<boolean>;
+        };
+    };
+    webhook(this: IWebhookFunctions): Promise<IWebhookResponseData>;
+}

package/dist/nodes/ZapApiTrigger/ZapApiTrigger.node.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZapApiTrigger = void 0;
+const loadOptions_1 = require("../shared/loadOptions");
+const verifySignature_1 = require("../shared/verifySignature");
+const EVENT_OPTIONS = [
+    "call.received",
+    "call.rejected",
+    "contact.update",
+    "group.join",
+    "group.leave",
+    "group.update",
+    "instance.connected",
+    "instance.disconnected",
+    "instance.qrcode",
+    "instance.test",
+    "label.update",
+    "message.deleted",
+    "message.edited",
+    "message.read",
+    "message.reaction",
+    "message.received",
+    "message.sent",
+    "message.status",
+    "newsletter.update",
+    "presence.update",
+    "status.viewed",
+].map((e) => ({ name: e, value: e }));
+class ZapApiTrigger {
+    constructor() {
+        this.description = {
+            displayName: "ZAP-API Trigger",
+            name: "zapApiTrigger",
+            icon: "file:zapapi.svg",
+            group: ["trigger"],
+            version: 1,
+            description: "Inicia o workflow em eventos do WhatsApp (ZAP-API)",
+            defaults: { name: "ZAP-API Trigger" },
+            inputs: [],
+            outputs: ["main"],
+            credentials: [{ name: "zapApiApi", required: true }],
+            webhooks: [
+                {
+                    name: "default",
+                    httpMethod: "POST",
+                    responseMode: "onReceived",
+                    path: "webhook",
+                },
+            ],
+            properties: [
+                {
+                    displayName: "Ativar este trigger SOBRESCREVE o webhook configurado na instância (uma URL por instância). Ao desativar, o webhook é limpo.",
+                    name: "overwriteNotice",
+                    type: "notice",
+                    default: "",
+                },
+                {
+                    displayName: "Instance Name or ID",
+                    name: "instanceId",
+                    type: "options",
+                    typeOptions: { loadOptionsMethod: "getInstances" },
+                    default: "",
+                    required: true,
+                    description: "Escolha a instância. Choose from the list, or specify an ID using an expression.",
+                },
+                {
+                    displayName: "Events",
+                    name: "events",
+                    type: "multiOptions",
+                    options: EVENT_OPTIONS,
+                    default: ["message.received"],
+                    required: true,
+                    description: "Quais eventos disparam o workflow",
+                },
+                {
+                    displayName: "Verify Signature",
+                    name: "verifySignature",
+                    type: "boolean",
+                    default: true,
+                    // eslint-disable-next-line n8n-nodes-base/node-param-description-boolean-without-whether
+                    description: "Whether to verify the X-ZapAPI-Signature-256 HMAC of each incoming webhook",
+                },
+                {
+                    displayName: "Com a verificação desligada, qualquer um que souber a URL do webhook pode disparar este fluxo. Mantenha ligada em produção.",
+                    name: "noVerifyNotice",
+                    type: "notice",
+                    default: "",
+                    displayOptions: { show: { verifySignature: [false] } },
+                },
+            ],
+        };
+        this.methods = {
+            loadOptions: { getInstances: loadOptions_1.getInstances },
+        };
+        this.webhookMethods = {
+            default: {
+                async checkExists() {
+                    // Always (re)create on activation — PUT is idempotent (overwrites the URL).
+                    return false;
+                },
+                async create() {
+                    const webhookUrl = this.getNodeWebhookUrl("default");
+                    const instanceId = this.getNodeParameter("instanceId");
+                    const events = this.getNodeParameter("events");
+                    const creds = await this.getCredentials("zapApiApi");
+                    let response;
+                    try {
+                        response = (await this.helpers.httpRequestWithAuthentication.call(this, "zapApiApi", {
+                            method: "PUT",
+                            baseURL: creds.baseUrl,
+                            url: `/instances/${instanceId}/webhook`,
+                            // secret: true → a ZAP-API gera um secret novo e o RETORNA na resposta.
+                            body: { url: webhookUrl, events, secret: true },
+                            json: true,
+                        }));
+                    }
+                    catch (error) {
+                        throw new Error(`Falha ao registrar o webhook na instância ${instanceId} (verifique o token, o ID da instância e se a URL do n8n é pública HTTPS): ${error.message}`);
+                    }
+                    if (!response?.webhookSecret) {
+                        throw new Error("A ZAP-API não retornou o webhookSecret ao registrar — não é possível verificar a assinatura. Verifique a versão da API.");
+                    }
+                    this.getWorkflowStaticData("node").secret = response.webhookSecret;
+                    return true;
+                },
+                async delete() {
+                    const instanceId = this.getNodeParameter("instanceId");
+                    const creds = await this.getCredentials("zapApiApi");
+                    try {
+                        await this.helpers.httpRequestWithAuthentication.call(this, "zapApiApi", {
+                            method: "DELETE",
+                            baseURL: creds.baseUrl,
+                            url: `/instances/${instanceId}/webhook`,
+                            json: true,
+                        });
+                    }
+                    catch {
+                        // best-effort: if the instance is gone, ignore the error.
+                    }
+                    const staticData = this.getWorkflowStaticData("node");
+                    delete staticData.secret;
+                    return true;
+                },
+            },
+        };
+    }
+    async webhook() {
+        const shouldVerify = this.getNodeParameter("verifySignature");
+        const body = this.getBodyData();
+        if (shouldVerify) {
+            const staticData = this.getWorkflowStaticData("node");
+            const secret = staticData.secret;
+            const headers = this.getHeaderData();
+            // headers são lowercased pelo Node.js; "X-ZapAPI-Signature-256" chega assim:
+            const sig = headers["x-zapapi-signature-256"];
+            // Prefer raw body (n8n populates req.rawBody); fallback to deterministic
+            // re-serialisation (our payload is a plain object, JSON.stringify is stable).
+            const req = this.getRequestObject();
+            const raw = req.rawBody ? req.rawBody.toString("utf8") : JSON.stringify(body);
+            if (!secret || !(0, verifySignature_1.verifySignature)(raw, secret, sig)) {
+                const res = this.getResponseObject();
+                res.status(401).send("invalid signature");
+                return { noWebhookResponse: true };
+            }
+        }
+        return {
+            workflowData: [this.helpers.returnJsonArray([body])],
+        };
+    }
+}
+exports.ZapApiTrigger = ZapApiTrigger;
+//# sourceMappingURL=ZapApiTrigger.node.js.map

package/dist/nodes/ZapApiTrigger/ZapApiTrigger.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ZapApiTrigger.node.js","sourceRoot":"","sources":["../../../nodes/ZapApiTrigger/ZapApiTrigger.node.ts"],"names":[],"mappings":";;;AAQA,uDAAqD;AACrD,+DAA4D;AAE5D,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,oBAAoB;IACpB,uBAAuB;IACvB,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;CAChB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAEtC,MAAa,aAAa;IAA1B;QACE,gBAAW,GAAyB;YAClC,WAAW,EAAE,iBAAiB;YAC9B,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,CAAC,SAAS,CAAC;YAClB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,oDAAoD;YACjE,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;YACrC,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,MAAM;oBAClB,YAAY,EAAE,YAAY;oBAC1B,IAAI,EAAE,SAAS;iBAChB;aACF;YACD,UAAU,EAAE;gBACV;oBACE,WAAW,EACT,8HAA8H;oBAChI,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;iBACZ;gBACD;oBACE,WAAW,EAAE,qBAAqB;oBAClC,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;oBAClD,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,WAAW,EACT,kFAAkF;iBACrF;gBACD;oBACE,WAAW,EAAE,QAAQ;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,mCAAmC;iBACjD;gBACD;oBACE,WAAW,EAAE,kBAAkB;oBAC/B,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;oBACb,yFAAyF;oBACzF,WAAW,EACT,4EAA4E;iBAC/E;gBACD;oBACE,WAAW,EACT,6HAA6H;oBAC/H,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;iBACvD;aACF;SACF,CAAC;QAEF,YAAO,GAAG;YACR,WAAW,EAAE,EAAE,YAAY,EAAZ,0BAAY,EAAE;SAC9B,CAAC;QAEF,mBAAc,GAAG;YACf,OAAO,EAAE;gBACP,KAAK,CAAC,WAAW;oBACf,4EAA4E;oBAC5E,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,KAAK,CAAC,MAAM;oBACV,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAW,CAAC;oBAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAW,CAAC;oBACjE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAa,CAAC;oBAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBAErD,IAAI,QAAoC,CAAC;oBACzC,IAAI,CAAC;wBACH,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;4BACnF,MAAM,EAAE,KAAK;4BACb,OAAO,EAAE,KAAK,CAAC,OAAiB;4BAChC,GAAG,EAAE,cAAc,UAAU,UAAU;4BACvC,wEAAwE;4BACxE,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;4BAC/C,IAAI,EAAE,IAAI;yBACX,CAAC,CAA+B,CAAC;oBACpC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,IAAI,KAAK,CACb,6CAA6C,UAAU,8EAA+E,KAAe,CAAC,OAAO,EAAE,CAChK,CAAC;oBACJ,CAAC;oBAED,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CACb,yHAAyH,CAC1H,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,KAAK,CAAC,MAAM;oBACV,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAW,CAAC;oBACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBACrD,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;4BACvE,MAAM,EAAE,QAAQ;4BAChB,OAAO,EAAE,KAAK,CAAC,OAAiB;4BAChC,GAAG,EAAE,cAAc,UAAU,UAAU;4BACvC,IAAI,EAAE,IAAI;yBACX,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,0DAA0D;oBAC5D,CAAC;oBACD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;oBACtD,OAAO,UAAU,CAAC,MAAM,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC;IA6BJ,CAAC;IA3BC,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAY,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEhC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,UAAU,CAAC,MAA4B,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,6EAA6E;YAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,wBAAwB,CAAuB,CAAC;YAEpE,yEAAyE;YACzE,8EAA8E;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAqC,CAAC;YACvE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAE9E,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,iCAAe,EAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBAClD,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAC1C,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAmB,CAAC,CAAC,CAAC;SACpE,CAAC;IACJ,CAAC;CACF;AA5JD,sCA4JC"}

package/dist/nodes/ZapApiTrigger/zapapi.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24"><rect width="24" height="24" rx="5" fill="#22c55e"/><path d="M12 5a7 7 0 0 0-6 10.6L5 19l3.5-1A7 7 0 1 0 12 5z" fill="#fff"/></svg>

package/dist/nodes/shared/loadOptions.d.ts

@@ -0,0 +1,10 @@
+import type { ILoadOptionsFunctions, INodePropertyOptions } from "n8n-workflow";
+/**
+ * Popula o dropdown de instâncias chamando GET {baseUrl}/instances com a
+ * credential. Compartilhado pelos nodes ZapApi e ZapApiTrigger.
+ *
+ * A API responde { instances: [{ id, instanceId, displayName, ... }] }. O
+ * `value` é o `instanceId` público (inst_...) — é o `:id` que as rotas
+ * /instances/:id/* esperam.
+ */
+export declare function getInstances(this: ILoadOptionsFunctions): Promise<INodePropertyOptions[]>;

package/dist/nodes/shared/loadOptions.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getInstances = getInstances;
+/**
+ * Popula o dropdown de instâncias chamando GET {baseUrl}/instances com a
+ * credential. Compartilhado pelos nodes ZapApi e ZapApiTrigger.
+ *
+ * A API responde { instances: [{ id, instanceId, displayName, ... }] }. O
+ * `value` é o `instanceId` público (inst_...) — é o `:id` que as rotas
+ * /instances/:id/* esperam.
+ */
+async function getInstances() {
+    const creds = await this.getCredentials("zapApiApi");
+    const res = (await this.helpers.httpRequestWithAuthentication.call(this, "zapApiApi", {
+        method: "GET",
+        baseURL: creds.baseUrl,
+        url: "/instances",
+        json: true,
+    }));
+    // Cobre array direto, { instances: [...] } e { data: [...] }.
+    const list = (Array.isArray(res)
+        ? res
+        : (res?.instances ??
+            res?.data ??
+            []));
+    return list.map((i) => ({
+        name: (i.displayName || i.instanceId || i.id),
+        value: (i.instanceId || i.id),
+    }));
+}
+//# sourceMappingURL=loadOptions.js.map

package/dist/nodes/shared/loadOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadOptions.js","sourceRoot":"","sources":["../../../nodes/shared/loadOptions.ts"],"names":[],"mappings":";;AAUA,oCAwBC;AAhCD;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY;IAGhC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;QACpF,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,CAAC,OAAiB;QAChC,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,IAAI;KACX,CAAC,CAAY,CAAC;IAEf,8DAA8D;IAC9D,MAAM,IAAI,GAAG,CACX,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAChB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,CAAE,GAAmD,EAAE,SAAS;YAC/D,GAA4B,EAAE,IAAI;YACnC,EAAE,CAAC,CAC6D,CAAC;IAEvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAW;QACvD,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAW;KACxC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/nodes/shared/verifySignature.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Verifica o header X-ZapAPI-Signature-256 (formato `sha256=<hexhmac>`),
+ * HMAC-SHA256 do corpo cru com o secret registrado. Comparação timing-safe.
+ */
+export declare function verifySignature(rawBody: string, secret: string, signatureHeader: string | undefined): boolean;

package/dist/nodes/shared/verifySignature.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifySignature = verifySignature;
+const crypto_1 = __importDefault(require("crypto"));
+/**
+ * Verifica o header X-ZapAPI-Signature-256 (formato `sha256=<hexhmac>`),
+ * HMAC-SHA256 do corpo cru com o secret registrado. Comparação timing-safe.
+ */
+function verifySignature(rawBody, secret, signatureHeader) {
+    if (!signatureHeader || !signatureHeader.startsWith("sha256="))
+        return false;
+    const provided = signatureHeader.slice("sha256=".length);
+    const expected = crypto_1.default.createHmac("sha256", secret).update(rawBody).digest("hex");
+    const a = Buffer.from(provided, "utf8");
+    const b = Buffer.from(expected, "utf8");
+    if (a.length !== b.length)
+        return false;
+    return crypto_1.default.timingSafeEqual(a, b);
+}
+//# sourceMappingURL=verifySignature.js.map

package/dist/nodes/shared/verifySignature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifySignature.js","sourceRoot":"","sources":["../../../nodes/shared/verifySignature.ts"],"names":[],"mappings":";;;;;AAMA,0CAYC;AAlBD,oDAA4B;AAE5B;;;GAGG;AACH,SAAgB,eAAe,CAC7B,OAAe,EACf,MAAc,EACd,eAAmC;IAEnC,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,gBAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "n8n-nodes-zap-api",
+  "version": "0.1.0",
+  "description": "n8n community node para a ZAP-API (WhatsApp): enviar mensagens e reagir a eventos.",
+  "keywords": [
+    "n8n-community-node-package",
+    "whatsapp",
+    "zap-api"
+  ],
+  "license": "MIT",
+  "homepage": "https://zap-api.tech",
+  "author": {
+    "name": "ZAP-API"
+  },
+  "scripts": {
+    "build": "tsc && gulp build:icons",
+    "dev": "tsc --watch",
+    "lint": "eslint nodes credentials --ext .ts",
+    "test": "vitest run"
+  },
+  "files": [
+    "dist"
+  ],
+  "n8n": {
+    "n8nNodesApiVersion": 1,
+    "credentials": [
+      "dist/credentials/ZapApiApi.credentials.js"
+    ],
+    "nodes": [
+      "dist/nodes/ZapApi/ZapApi.node.js",
+      "dist/nodes/ZapApiTrigger/ZapApiTrigger.node.js"
+    ]
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@typescript-eslint/parser": "^7.0.0",
+    "eslint-plugin-n8n-nodes-base": "^1.16.0",
+    "gulp": "^4.0.2",
+    "n8n-workflow": "^1.40.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.6.0"
+  },
+  "peerDependencies": {
+    "n8n-workflow": "*"
+  }
+}