watahub 0.1.0 → 0.2.0

package/README.md

@@ -136,7 +136,7 @@ Expected response:
 {
   "status": "ok",
   "service": "watahub",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "timestamp": 1729620000000
 }
 ```
@@ -298,7 +298,7 @@ pnpm run deploy
 | `GET` | `/v1/media/:mediaId` | Resolves media ID to temporary CDN download URL |
 | `POST` | `/v1/media` | Uploads media file (`multipart/form-data`) streaming to Meta |
 | `POST` | `/v1/media/:phoneNumberId` | Uploads media scoped to a specific phone number |
-| `GET` | `/v1/templates/:wabaId` | Lists approved HSM templates from Meta Graph API |
+| `GET` | `/v1/templates/:wabaId` | Lists a WABA's message templates from Meta Graph API, one page per call (`?after=`) |
 | `POST` | `/v1/onboarding/connect` | Connects one phone line (exchange, store, subscribe, register). Does not return the token |
 | `GET` | `/v1/onboarding/launch` | Public Embedded Signup parameters for `FB.login` (`appId`, `configurationId`, `apiVersion`) |
 | `POST` | `/v1/onboarding/exchange` | Low-level code exchange. Returns the token. Prefer connect |
@@ -322,7 +322,7 @@ pnpm run deploy
 
 ## 🚦 Project Status
 
-Watahub is currently in active development (**v0.1.0**).
+Watahub is currently in active development (**v0.2.0**).
 
 The core WhatsApp bridge functionality (message dispatch, streaming media uploads, HMAC verification, replay protection, rate limiting, and library exports) is production-ready and fully tested with 100% passing automated tests across Node.js and Cloudflare Workers.
 

package/dist/config.d.ts

@@ -1,7 +1,7 @@
 import type { Context } from 'hono';
 export declare const GATEWAY_NAME = "watahub";
-export declare const GATEWAY_VERSION = "0.1.0";
-export declare const GATEWAY_USER_AGENT = "Watahub-Gateway/0.1.0";
+export declare const GATEWAY_VERSION = "0.2.0";
+export declare const GATEWAY_USER_AGENT = "Watahub-Gateway/0.2.0";
 export declare const META_GRAPH_BASE_URL = "https://graph.facebook.com";
 export declare const DEFAULT_META_API_VERSION = "v24.0";
 /**

package/dist/config.js

@@ -1,6 +1,6 @@
 import { getEnvVar } from './utils/env.js';
 export const GATEWAY_NAME = 'watahub';
-export const GATEWAY_VERSION = '0.1.0';
+export const GATEWAY_VERSION = '0.2.0';
 export const GATEWAY_USER_AGENT = `Watahub-Gateway/${GATEWAY_VERSION}`;
 export const META_GRAPH_BASE_URL = 'https://graph.facebook.com';
 export const DEFAULT_META_API_VERSION = 'v24.0';

package/dist/routes/templates.js

@@ -3,12 +3,12 @@ import { getConfig } from '../config.js';
 import { validationError } from '../http/body.js';
 import { errorResponse } from '../http/errors.js';
 import { metaClientFor } from '../http/meta.js';
-import { isGraphId } from '../schemas/common.js';
+import { isGraphId, isPageCursor } from '../schemas/common.js';
 export function createTemplatesRouter(deps) {
     const router = new Hono();
     /**
-     * List WhatsApp Message Templates
-     * GET /v1/templates or GET /v1/templates/:wabaId
+     * List WhatsApp Message Templates, one page at a time
+     * GET /v1/templates or GET /v1/templates/:wabaId, then ?after=<paging.after> for the next page
      */
     router.get('/v1/templates/:wabaId?', async (c) => {
         const wabaId = c.req.param('wabaId') || c.req.query('wabaId') || getConfig(c).metaDefaultWabaId;
@@ -19,11 +19,15 @@ export function createTemplatesRouter(deps) {
         if (!isGraphId(wabaId)) {
             return validationError(c, { wabaId: ['Must be a numeric Meta Graph ID'] });
         }
+        const after = c.req.query('after');
+        if (after !== undefined && !isPageCursor(after)) {
+            return validationError(c, { after: ['Must be a paging cursor from a previous response'] });
+        }
         const meta = await metaClientFor(c, deps);
         if (!meta.ok)
             return meta.response;
         try {
-            return c.json({ data: await meta.value.listTemplates(wabaId) }, 200);
+            return c.json(await meta.value.listTemplates(wabaId, after), 200);
         }
         catch (err) {
             return errorResponse(c, err, deps.logger);

package/dist/schemas/common.d.ts

@@ -6,6 +6,12 @@ import { z } from 'zod';
  */
 export declare const GraphIdSchema: z.ZodString;
 export declare function isGraphId(value: string): boolean;
+/**
+ * Graph paging cursors are opaque base64 strings. A cursor only ever travels URL-encoded as a query value,
+ * never as a path segment; the shape and bound keep anything else out of the Graph URL.
+ */
+export declare const PageCursorSchema: z.ZodString;
+export declare function isPageCursor(value: string): boolean;
 /**
  * True when the URL is https, carries no credentials and does not point at a
  * loopback, private, link-local or internal host. Hostnames are checked as

package/dist/schemas/common.js

@@ -8,6 +8,17 @@ export const GraphIdSchema = z.string().regex(/^\d{1,32}$/, 'Must be a numeric M
 export function isGraphId(value) {
     return GraphIdSchema.safeParse(value).success;
 }
+/**
+ * Graph paging cursors are opaque base64 strings. A cursor only ever travels URL-encoded as a query value,
+ * never as a path segment; the shape and bound keep anything else out of the Graph URL.
+ */
+export const PageCursorSchema = z
+    .string()
+    .max(1024)
+    .regex(/^[A-Za-z0-9+/=_-]+$/, 'Must be a paging cursor from a previous response');
+export function isPageCursor(value) {
+    return PageCursorSchema.safeParse(value).success;
+}
 const BLOCKED_HOST_SUFFIXES = ['.localhost', '.local', '.internal', '.home.arpa'];
 function ipv4Octets(host) {
     if (!/^\d{1,3}(\.\d{1,3}){3}$/.test(host))

package/dist/services/meta-client.d.ts

@@ -2,7 +2,7 @@
  * Direct Meta Graph API client: one request path with timeouts and safe retries.
  */
 import { type RetryPolicy, type Sleep } from './retry.js';
-import type { MetaMessageTemplate, SendMessagePayload, SendMessageResponse } from '../types/gateway.js';
+import type { MetaTemplatePage, SendMessagePayload, SendMessageResponse } from '../types/gateway.js';
 export type { RetryPolicy } from './retry.js';
 export { backoffDelayMs } from './retry.js';
 export interface MetaClientConfig {
@@ -21,7 +21,7 @@ export interface MetaClientConfig {
  */
 export interface MetaGraphClient {
     sendMessage(phoneNumberId: string, payload: SendMessagePayload): Promise<SendMessageResponse>;
-    listTemplates(wabaId: string): Promise<MetaMessageTemplate[]>;
+    listTemplates(wabaId: string, after?: string): Promise<MetaTemplatePage>;
     exchangeCodeForToken(code: string, clientId: string, clientSecret: string): Promise<{
         accessToken: string;
     }>;
@@ -49,9 +49,9 @@ export declare class MetaClient implements MetaGraphClient {
      */
     sendMessage(phoneNumberId: string, payload: SendMessagePayload, overrideToken?: string): Promise<SendMessageResponse>;
     /**
-     * List approved message templates from WABA
+     * One page of the WABA's message templates. Pass the previous page's `paging.after` to get the next one.
      */
-    listTemplates(wabaId: string, overrideToken?: string): Promise<MetaMessageTemplate[]>;
+    listTemplates(wabaId: string, after?: string, overrideToken?: string): Promise<MetaTemplatePage>;
     /**
      * Exchange an Embedded Signup code for the business integration system user token.
      * Unauthenticated: app credentials authenticate the call, no bearer token is sent.

package/dist/services/meta-client.js

@@ -57,11 +57,15 @@ export class MetaClient {
         };
     }
     /**
-     * List approved message templates from WABA
+     * One page of the WABA's message templates. Pass the previous page's `paging.after` to get the next one.
      */
-    async listTemplates(wabaId, overrideToken) {
-        const { data } = ensureOk(await this.get(`${wabaId}/message_templates`, overrideToken));
-        return Array.isArray(data.data) ? data.data.filter(isRecord) : [];
+    async listTemplates(wabaId, after, overrideToken) {
+        const query = after ? `?${new URLSearchParams({ after }).toString()}` : '';
+        const { data } = ensureOk(await this.get(`${wabaId}/message_templates${query}`, overrideToken));
+        return {
+            data: Array.isArray(data.data) ? data.data.filter(isRecord) : [],
+            paging: { after: nextPageCursor(data.paging) },
+        };
     }
     /**
      * Exchange an Embedded Signup code for the business integration system user token.
@@ -200,6 +204,16 @@ function ensureOk(res) {
         throw new WatahubApiError(res.data, res.status);
     return res;
 }
+/**
+ * Meta keeps `cursors.after` on the last page too; only `next` says another page exists.
+ * `next` itself is never returned: it is a Graph URL, not one of ours.
+ */
+function nextPageCursor(paging) {
+    if (!isRecord(paging) || typeof paging.next !== 'string' || !isRecord(paging.cursors))
+        return undefined;
+    const { after } = paging.cursors;
+    return typeof after === 'string' && after ? after : undefined;
+}
 /** Meta `/messages` request body. */
 /**
  * Business-scoped user ID: ISO 3166 alpha-2 country code, a dot and up to 128

package/dist/types/gateway.d.ts

@@ -59,6 +59,13 @@ export interface SendMessageResponse {
 }
 /** A message template exactly as Graph returns it (`id`, `name`, `status`, `language`, `components`...) */
 export type MetaMessageTemplate = Record<string, unknown>;
+/** One page of a WABA's templates. `paging.after` is set only when Meta has another page. */
+export interface MetaTemplatePage {
+    data: MetaMessageTemplate[];
+    paging: {
+        after?: string;
+    };
+}
 export interface ContactAddress {
     street?: string;
     city?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "watahub",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The open-source, self-hostable WhatsApp Cloud API Gateway & Infrastructure (IaaS)",
   "author": "Hub Ventures <hola@elhub.ventures>",
   "license": "MIT",

package/dist/services/phone-directory.d.ts

@@ -1,11 +0,0 @@
-import type { PhoneConfig, PhoneDirectory } from '../deps.js';
-export declare class InMemoryPhoneDirectory implements PhoneDirectory {
-    private readonly phones;
-    constructor(initial?: Record<string, PhoneConfig> | Map<string, PhoneConfig>);
-    set(phoneNumberId: string, config: PhoneConfig): void;
-    get(phoneNumberId: string): PhoneConfig | undefined;
-    delete(phoneNumberId: string): boolean;
-    clear(): void;
-    lookup(phoneNumberId: string): Promise<PhoneConfig | null>;
-}
-export declare const defaultPhoneDirectory: InMemoryPhoneDirectory;

package/dist/services/phone-directory.js

@@ -1,29 +0,0 @@
-export class InMemoryPhoneDirectory {
-    phones = new Map();
-    constructor(initial = {}) {
-        if (initial instanceof Map) {
-            this.phones = new Map(initial);
-        }
-        else {
-            for (const [id, cfg] of Object.entries(initial)) {
-                this.phones.set(id, cfg);
-            }
-        }
-    }
-    set(phoneNumberId, config) {
-        this.phones.set(phoneNumberId, config);
-    }
-    get(phoneNumberId) {
-        return this.phones.get(phoneNumberId);
-    }
-    delete(phoneNumberId) {
-        return this.phones.delete(phoneNumberId);
-    }
-    clear() {
-        this.phones.clear();
-    }
-    lookup(phoneNumberId) {
-        return Promise.resolve(this.phones.get(phoneNumberId) ?? null);
-    }
-}
-export const defaultPhoneDirectory = new InMemoryPhoneDirectory();