${body}

`;\n\n/** Navegacao entre as telas do cliente. `sid` carrega a sessao assinada. */\nconst nav = (atual: string, sid: string) => {\n const item = (id: string, label: string, href: string) =>\n id === atual\n ? `${esc(label)}`\n : `${esc(label)}`;\n const s = encodeURIComponent(sid);\n return `

\n ${item(\"inicio\", \"Início\", `/home?sid=${s}`)}\n ${item(\"chamadas\", \"Chamadas\", `/dashboard?sid=${s}`)}\n ${item(\"plano\", \"Plano\", `/plano?sid=${s}`)}\n

`;\n};\n\n// ---------- Instalacao ----------\n\n// O Bitrix valida a URL de instalacao com um GET antes de aceitar o cadastro\n// do app (\"the URL specified is not accessible\"). O fluxo real e por POST, mas\n// esta rota precisa responder 200 a um GET simples.\napp.get(\"/install\", (c) =>\n c.html(layout(\"DualWin Call\", `\n

DualWin Call

Esta página é o ponto de instalação do aplicativo.

Para instalar, acesse o Bitrix24 Market dentro do seu portal e procure\n por DualWin Call.

Telefonia integrada ao CRM, com análise de chamadas por IA.

`)));\n\napp.post(\"/install\", async (c) => {\n const raw = await c.req.text();\n const form = new URLSearchParams(raw);\n const auth = authFromFrameForm(form, domainFromHeaders(c.req.raw));\n\n if (!auth) {\n // Payload inteiro (o Bitrix omite DOMAIN em alguns casos; ver bitrix.ts)\n await log(null, null, \"install_bad_payload\", {\n body: raw,\n referer: c.req.header(\"referer\"),\n origin: c.req.header(\"origin\"),\n });\n return c.html(layout(\"Erro\", \"

Não foi possível instalar

Dados de autenticação ausentes.

\"), 400);\n }\n\n await upsertTenant({\n memberId: auth.member_id,\n domain: auth.domain!,\n accessToken: auth.access_token,\n refreshToken: auth.refresh_token,\n expiresAt: Date.now() + Number(auth.expires_in ?? 3600) * 1000,\n });\n await log(auth.member_id, auth.domain!, \"installed\", { via: \"install_path\" });\n\n // Sem installFinish() o Bitrix nunca marca o app como instalado.\n return c.html(`\n\n\n\n

DualWin Call instalado

Estamos ativando sua linha telefônica. Você será avisado quando estiver pronta.

\n`);\n});\n\n// ---------- Evento ONAPPINSTALL (backup do fluxo acima) ----------\napp.post(\"/event\", async (c) => {\n const raw = await c.req.text();\n const form = new URLSearchParams(raw);\n const event = form.get(\"event\");\n\n const memberId = form.get(\"auth[member_id]\");\n const domain = form.get(\"auth[domain]\");\n\n if (event === \"ONAPPUNINSTALL\" && memberId) {\n await markUninstalled(memberId);\n await log(memberId, domain, \"uninstalled\", {});\n return c.json({ ok: true });\n }\n\n if (event === \"ONAPPINSTALL\" && memberId && domain) {\n const accessToken = form.get(\"auth[access_token]\");\n const refreshToken = form.get(\"auth[refresh_token]\");\n if (accessToken && refreshToken) {\n await upsertTenant({\n memberId, domain, accessToken, refreshToken,\n expiresAt: Date.now() + Number(form.get(\"auth[expires_in]\") ?? 3600) * 1000,\n });\n await log(memberId, domain, \"installed\", { via: \"event\" });\n }\n }\n\n return c.json({ ok: true });\n});\n\n// ---------- Tela do cliente (dentro do Bitrix) ----------\napp.all(\"/\", async (c) => {\n let memberId: string | null = null;\n\n if (c.req.method === \"POST\") {\n const form = new URLSearchParams(await c.req.text());\n memberId = form.get(\"member_id\");\n // Renova os tokens a cada abertura — o frame sempre traz um par novo.\n const auth = authFromFrameForm(form, domainFromHeaders(c.req.raw));\n if (auth) {\n await upsertTenant({\n memberId: auth.member_id,\n domain: auth.domain!,\n accessToken: auth.access_token,\n refreshToken: auth.refresh_token,\n expiresAt: Date.now() + Number(auth.expires_in ?? 3600) * 1000,\n });\n }\n }\n\n if (!memberId) {\n return c.html(layout(\"DualWin Call\", `\n

DualWin Call

Abra este aplicativo de dentro do seu Bitrix24.

`));\n }\n\n const sid = await createSession(memberId);\n return c.html(await renderHome(memberId, sid));\n});\n\n// Mesma tela inicial, acessivel por GET via sessao assinada (navegacao interna).\napp.get(\"/home\", async (c) => {\n const sid = c.req.query(\"sid\") ?? \"\";\n const memberId = await readSession(sid);\n if (!memberId) {\n return c.html(layout(\"Sessão expirada\", `\n

Sessão expirada

Feche e abra o DualWin Call novamente dentro do Bitrix24.

`), 401);\n }\n return c.html(await renderHome(memberId, sid));\n});\n\nasync function renderHome(memberId: string, sid: string): Promise {\n const sip = await getSip(memberId);\n const registered = sip?.registration_status === \"200\";\n\n const status = !sip\n ? `Aguardando ativação\n

Sua linha está sendo preparada pela equipe DualWin. Assim que estiver pronta, ela aparecerá aqui e em Telefonia.

`\n : registered\n ? `Linha ativa\n

Sua linha ${esc(sip.line_title)} está registrada e pronta para uso.

Para ligar: abra um card no CRM e clique no telefone do contato.

`\n : `Falha no registro\n

Código: ${esc(sip.registration_status ?? \"—\")}. Nossa equipe já foi notificada.

`;\n\n return layout(\"DualWin Call\", `\n

DualWin Call

Telefonia integrada ao seu CRM, com análise de chamadas por IA.

\n ${nav(\"inicio\", sid)}\n

${status}

\n ${registered ? `

\n Próximos passos\n

Em Telefonia → Usuários, defina esta linha como número de saída dos vendedores.
Cadastre um script de vendas para a IA avaliar as chamadas.
Confirme o idioma da linha como Português (Brasil).

` : \"\"}`);\n}\n\n// ---------- Dashboard de chamadas ----------\napp.get(\"/dashboard\", async (c) => {\n const sid = c.req.query(\"sid\") ?? \"\";\n const memberId = await readSession(sid);\n if (!memberId) {\n return c.html(layout(\"Sessão expirada\", `\n

Sessão expirada

Feche e abra o DualWin Call novamente dentro do Bitrix24.

`), 401);\n }\n\n const bx = await TenantBitrix.forTenant(memberId);\n if (!bx) return c.html(layout(\"Erro\", \"

Sem acesso ao portal

Reinstale o aplicativo.

\"), 400);\n\n // Padrao: ultimos 30 dias\n const hoje = new Date().toISOString().slice(0, 10);\n const trinta = new Date(Date.now() - 30 * 864e5).toISOString().slice(0, 10);\n\n const f = {\n from: c.req.query(\"from\") || trinta,\n to: c.req.query(\"to\") || hoje,\n direction: c.req.query(\"direction\") ?? \"\",\n line: c.req.query(\"line\") ?? \"\",\n phone: (c.req.query(\"phone\") ?? \"\").trim(),\n onlyAnswered: c.req.query(\"answered\") === \"1\",\n };\n\n const [calls, linesResp] = await Promise.all([\n fetchCalls(bx, f),\n bx.call(\"voximplant.line.get\"),\n ]);\n const lines: Record = linesResp?.result ?? {};\n const st = computeStats(calls);\n\n const opt = (v: string, label: string, sel: string) =>\n ``;\n\n const tile = (label: string, value: string, hint = \"\") => `\n

${esc(label)}

${esc(value)}

\n ${hint ? `

${esc(hint)}

` : \"\"}\n

`;\n\n const rows = calls.slice(0, 200).map((c2) => {\n const dt = c2.startDate ? c2.startDate.replace(\"T\", \" \").substring(0, 16) : \"—\";\n const dir = c2.type === \"1\" ? \"Saída\" : c2.type === \"2\" ? \"Entrada\" : \"—\";\n return `\n ${esc(dt)}\n ${esc(dir)}\n ${esc(c2.phone)}\n ${esc(formatDuration(c2.duration))}\n ${c2.answered\n ? 'Atendida'\n : `${esc(failureLabel(c2.failedCode))}`}\n ${c2.hasRecord ? \"🎧\" : \"—\"}\n ${esc(lines[c2.line] ?? c2.line ?? \"—\")}\n `;\n }).join(\"\");\n\n return c.html(layout(\"Chamadas — DualWin Call\", `\n

Chamadas

${esc(f.from)} a ${esc(f.to)}

\n ${nav(\"chamadas\", sid)}\n\n

\n ${tile(\"Total\", String(st.total))}\n ${tile(\"Atendidas\", String(st.answered), `${st.answerRate}% de atendimento`)}\n ${tile(\"Não atendidas\", String(st.missed))}\n ${tile(\"Tempo falado\", formatDuration(st.totalSeconds), `média ${formatDuration(st.avgSeconds)}`)}\n ${tile(\"Gravadas\", String(st.withRecording))}\n

\n\n

\n \n

\n\n

\n \n \n ${rows || ''}\n

Data	Direção	Número	Duração	Status	Áudio	Linha
Nenhuma chamada no período.

\n ${calls.length > 200 ? `

Mostrando 200 de ${calls.length} chamadas. Refine o período para ver o restante.

` : \"\"}\n

`));\n});\n\n// ---------- Planos e contratação ----------\nconst brl = (cents: number) =>\n (cents / 100).toLocaleString(\"pt-BR\", { style: \"currency\", currency: \"BRL\" });\n\napp.get(\"/plano\", async (c) => {\n const sid = c.req.query(\"sid\") ?? \"\";\n const memberId = await readSession(sid);\n if (!memberId) {\n return c.html(layout(\"Sessão expirada\", `\n

Sessão expirada

Feche e abra o DualWin Call novamente dentro do Bitrix24.

`), 401);\n }\n\n const [plansRes, subRes] = await Promise.all([\n sqliteQuery(\"SELECT * FROM plans WHERE active = 1 ORDER BY sort_order\"),\n sqliteQuery(\"SELECT * FROM subscriptions WHERE member_id = ?\", [memberId]),\n ]);\n const plans = plansRes as any[];\n const sub = (subRes as any[])[0] ?? null;\n\n const atual = sub?.status === \"active\" ? sub.plan_code : null;\n\n // Numero de usuarios: por padrao os usuarios ativos do proprio portal, para o\n // cliente ver o preco dele e nao uma tabela generica. Ajustavel na tela.\n let usuariosPortal = 0;\n const bx = await TenantBitrix.forTenant(memberId);\n if (bx) {\n const r = await bx.call(\"user.get\", { FILTER: { ACTIVE: \"Y\" } });\n usuariosPortal = Number(r?.total ?? r?.result?.length ?? 0);\n }\n\n const usuarios = Math.max(1, Number(c.req.query(\"u\")) || usuariosPortal || 1);\n\n const cards = plans.map((p) => {\n const base = Number(p.price_cents) || 0;\n const perUser = Number(p.per_user_cents) || 0;\n const preco = base + perUser * usuarios;\n const isAtual = p.code === atual;\n const feats = String(p.features ?? \"\").split(\"|\").filter(Boolean);\n\n // Preco ainda nao definido: nao inventamos botao de compra que nao cobra.\n const acao = isAtual\n ? 'Seu plano atual'\n : preco > 0\n ? ``\n : `Falar com a DualWin →`;\n\n return `

\n ${esc(p.name)}\n

${esc(p.description ?? \"\")}

${preco > 0 ? esc(brl(preco)) : \"Sob consulta\"}

\n ${preco > 0\n ? `

por mês

${esc(brl(base))} + ${esc(brl(perUser))} × ${usuarios} usuário${usuarios === 1 ? \"\" : \"s\"}

`\n : \"\"}\n

${esc(f)}

\n ${acao}\n

`;\n }).join(\"\");\n\n const statusAssinatura = sub\n ? sub.status === \"active\"\n ? `

Assinatura ativa\n ${sub.current_period_end ? `

Próxima renovação: ${esc(String(sub.current_period_end))}

` : \"\"}

`\n : sub.status === \"pending\" && sub.checkout_url\n ? `

Pagamento pendente\n

Concluir pagamento →

`\n : \"\"\n : \"\";\n\n return c.html(layout(\"Plano — DualWin Call\", `\n

Plano

Escolha o plano que atende sua operação.

\n ${nav(\"plano\", sid)}\n ${statusAssinatura}\n

\n \n ${usuariosPortal\n ? `

Seu portal tem ${usuariosPortal} usuário${usuariosPortal === 1 ? \"\" : \"s\"} ativo${usuariosPortal === 1 ? \"\" : \"s\"}.

`\n : \"\"}\n

\n ${cards}\n

A linha telefônica é contratada por você diretamente com a operadora,\n que cobra os minutos conforme o uso. Nosso papel é a conexão com o Bitrix24, a análise por IA e o suporte —\n funciona com a operadora que você já usa ou com uma que possamos indicar.

`));\n});\n\n// Inicia a contratacao: cria a sessao de checkout no Asaas e redireciona.\napp.post(\"/plano/contratar\", async (c) => {\n const form = new URLSearchParams(await c.req.text());\n const sid = form.get(\"sid\") ?? \"\";\n const planCode = form.get(\"plan\") ?? \"\";\n const memberId = await readSession(sid);\n\n if (!memberId) return c.html(layout(\"Sessão expirada\", \"

Sessão expirada

\"), 401);\n\n if (!asaasConfigured()) {\n return c.html(layout(\"Indisponível\", `\n

Contratação ainda não disponível

Fale com a DualWin em contato@dualwin.online para ativar seu plano.

`), 503);\n }\n\n const plans = await sqliteQuery(\"SELECT * FROM plans WHERE code = ? AND active = 1\", [planCode]);\n const plan = plans[0] as any;\n if (!plan) return c.html(layout(\"Erro\", \"

Plano não encontrado

\"), 404);\n\n // Recalcula no servidor: o valor do formulario nao e confiavel.\n const usuarios = Math.max(1, Number(form.get(\"users\")) || 1);\n const preco = (Number(plan.price_cents) || 0)\n + (Number(plan.per_user_cents) || 0) * usuarios;\n if (preco <= 0) {\n return c.html(layout(\"Indisponível\", `\n

Plano sob consulta

Este plano ainda não tem contratação online. Fale com a DualWin.

`), 400);\n }\n\n const tenant = await getTenant(memberId);\n const base = new URL(c.req.url).origin;\n const ref = `${memberId}:${planCode}:${Date.now()}`;\n\n try {\n const { id, link } = await createCheckout({\n planName: `DualWin Call — ${plan.name}`,\n planDescription: String(plan.description ?? \"\"),\n valueReais: preco / 100,\n cycle: String(plan.cycle ?? \"MONTHLY\"),\n externalReference: ref,\n successUrl: `${base}/plano/retorno?st=ok&sid=${encodeURIComponent(sid)}`,\n cancelUrl: `${base}/plano/retorno?st=cancel&sid=${encodeURIComponent(sid)}`,\n expiredUrl: `${base}/plano/retorno?st=expired&sid=${encodeURIComponent(sid)}`,\n customer: { name: tenant?.company_name ?? undefined, email: tenant?.installed_by_email ?? undefined },\n });\n\n await sqliteQuery(\n `INSERT INTO subscriptions (member_id, plan_code, status, checkout_url, created_at, updated_at)\n VALUES (?, ?, 'pending', ?, ?, ?)\n ON CONFLICT(member_id) DO UPDATE SET\n plan_code = excluded.plan_code, status = 'pending',\n checkout_url = excluded.checkout_url, updated_at = excluded.updated_at`,\n [memberId, planCode, link, new Date().toISOString(), new Date().toISOString()],\n );\n await log(memberId, null, \"checkout_criado\", { checkoutId: id, plano: planCode, ref });\n\n return new Response(null, { status: 302, headers: { Location: link } });\n } catch (e) {\n await log(memberId, null, \"checkout_falhou\", String(e));\n return c.html(layout(\"Erro\", `\n

Não foi possível iniciar a contratação

${esc(String(e))}

← voltar

`), 502);\n }\n});\n\n// Retorno do checkout — apenas UX. A liberacao real vem pelo webhook.\napp.get(\"/plano/retorno\", async (c) => {\n const sid = c.req.query(\"sid\") ?? \"\";\n const st = c.req.query(\"st\") ?? \"\";\n const back = `/plano?sid=${encodeURIComponent(sid)}`;\n\n const msg = st === \"ok\"\n ? `Pagamento recebido\n

Estamos confirmando com a operadora. Seu plano é ativado automaticamente em instantes.

`\n : st === \"cancel\"\n ? `Contratação cancelada

Nada foi cobrado.

`\n : `Sessão expirada

O prazo do checkout terminou. Tente novamente.

`;\n\n return c.html(layout(\"Contratação\", `\n

Contratação

${msg}

← voltar ao plano

`));\n});\n\n// Webhook do Asaas. Responder 200 rapido; 15 falhas seguidas pausam a fila deles.\napp.post(\"/webhook/asaas\", async (c) => {\n if (!verifyWebhook(c.req.raw)) {\n console.error(\"[asaas] webhook rejeitado: token inválido\");\n return c.json({ received: false }, 401);\n }\n\n const body = await c.req.json().catch(() => null);\n const eventId = String(body?.id ?? \"\");\n const event = String(body?.event ?? \"\");\n\n if (!eventId || !event) return c.json({ received: true });\n\n // Entrega e at-least-once: ignorar reprocessamento do mesmo evento.\n const jaVisto = await sqliteQuery(\"SELECT 1 FROM webhook_events WHERE event_id = ?\", [eventId]);\n if (jaVisto.length) return c.json({ received: true, duplicate: true });\n await sqliteQuery(\n \"INSERT INTO webhook_events (event_id, event_type, processed_at) VALUES (?, ?, ?)\",\n [eventId, event, new Date().toISOString()],\n );\n\n // externalReference = \"memberId:planCode:timestamp\"\n const ref = String(body?.payment?.externalReference ?? body?.subscription?.externalReference ?? \"\");\n const memberId = ref.split(\":\")[0] || null;\n\n await sqliteQuery(\n \"INSERT INTO billing_events (member_id, event, payload, created_at) VALUES (?, ?, ?, ?)\",\n [memberId, event, JSON.stringify(body).substring(0, 4000), new Date().toISOString()],\n );\n\n if (memberId && EVENTOS_LIBERA.has(event)) {\n await sqliteQuery(\n `UPDATE subscriptions SET status='active', asaas_subscription_id=?, updated_at=? WHERE member_id=?`,\n [String(body?.payment?.subscription ?? \"\"), new Date().toISOString(), memberId],\n );\n console.log(`[asaas] plano ATIVADO para ${memberId} (${event})`);\n } else if (memberId && EVENTOS_SUSPENDE.has(event)) {\n await sqliteQuery(\n `UPDATE subscriptions SET status='suspended', updated_at=? WHERE member_id=?`,\n [new Date().toISOString(), memberId],\n );\n console.log(`[asaas] plano SUSPENSO para ${memberId} (${event})`);\n }\n\n return c.json({ received: true });\n});\n\n// ---------- Painel administrativo DualWin ----------\nfunction adminOk(c: any): boolean {\n if (!ADMIN_SECRET) return false;\n const key = c.req.query(\"key\") ?? \"\";\n return key === ADMIN_SECRET;\n}\n\napp.get(\"/admin\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n\n const tenants = await listTenants();\n const rows = tenants.map((t) => {\n const st = t.registration_status === \"200\"\n ? 'ativa'\n : t.config_id\n ? `${esc(t.registration_status ?? \"erro\")}`\n : 'pendente';\n return `\n ${esc(t.domain)}
${esc(t.member_id)}\n ${esc(t.status)}\n ${st}\n ${esc(t.line_title ?? \"—\")}\n provisionar\n `;\n }).join(\"\");\n\n return c.html(layout(\"Admin — DualWin Call\", `\n

DualWin Call — Portais instalados

${tenants.length} portal(is)

\n \n ${rows || ''}

Portal	App	Linha	Título
Nenhum portal instalado ainda.

`));\n});\n\napp.get(\"/admin/tenant\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n const memberId = c.req.query(\"member_id\") ?? \"\";\n const t = await getTenant(memberId);\n if (!t) return c.text(\"Portal não encontrado\", 404);\n\n const sip = await getSip(memberId);\n const key = c.req.query(\"key\")!;\n\n return c.html(layout(\"Provisionar\", `\n

${esc(t.domain)}

${esc(memberId)}

\n ${sip ? `

Linha atual: ${esc(sip.line_title)} —\n status ${esc(sip.registration_status ?? \"—\")}, config ${esc(sip.config_id)}

` : \"\"}\n

\n Provisionar tronco DirectCall\n \n

O registro leva alguns segundos. Se falhar, normalmente é bloqueio de IP na operadora.

\n Diagnóstico\n

\n Testar acesso à API ·\n Forçar renovação de token\n

← voltar

`));\n});\n\n// Remove uma linha SIP do portal do cliente.\n// IMPORTANTE: linhas criadas pelo app so sao visiveis/removiveis pelo proprio\n// app — um webhook do portal nao as enxerga (contextos de auth isolados).\napp.post(\"/admin/deprovision\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n\n const form = new URLSearchParams(await c.req.text());\n const memberId = (form.get(\"member_id\") ?? \"\").trim();\n const configId = (form.get(\"config_id\") ?? \"\").trim();\n const key = c.req.query(\"key\")!;\n\n const bx = await TenantBitrix.forTenant(memberId);\n if (!bx) return c.html(layout(\"Erro\", \"

Sem token válido

\"), 400);\n\n const del = await bx.call(\"voximplant.sip.delete\", { CONFIG_ID: configId });\n const lines = await bx.call(\"voximplant.line.get\");\n await log(memberId, null, \"deprovisioned\", { configId, resp: del?.result ?? del });\n\n return c.html(layout(\"Removido\", `\n

${del?.result ? \"Linha removida\" : \"Falha ao remover\"}

CONFIG_ID ${esc(configId)} — ${esc(JSON.stringify(del?.result ?? del?.error_description))}

Linhas restantes: ${esc(JSON.stringify(lines?.result))}

← portais

`));\n});\n\n// Forca a renovacao do token — unica forma de validar o client_secret, que so\n// e usado no refresh (a instalacao recebe os tokens prontos no POST do frame).\napp.get(\"/admin/refresh\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n const memberId = c.req.query(\"member_id\") ?? \"\";\n const key = c.req.query(\"key\")!;\n\n const t = await getTenant(memberId);\n if (!t?.refresh_token) return c.html(layout(\"Erro\", \"

Sem refresh_token

\"), 400);\n\n const antes = t.access_token?.substring(0, 12);\n const r = await refreshTokens(memberId, t.refresh_token);\n const depois = r?.accessToken?.substring(0, 12);\n\n // refreshTokens() so devolve null; o erro cru do Bitrix fica no log.\n let erroBitrix = \"—\";\n if (!r) {\n const l = await sqliteQuery(\n `SELECT detail FROM install_log WHERE event = 'token_refresh_failed' AND member_id = ?\n ORDER BY id DESC LIMIT 1`,\n [memberId],\n );\n erroBitrix = String((l[0] as any)?.detail ?? \"sem resposta\");\n }\n\n return c.html(layout(\"Renovação de token\", `\n

${r ? \"client_secret está correto\" : \"Falha na renovação\"}

\n ${r\n ? `Token renovado\n

Antes: ${esc(antes)}… · Depois: ${esc(depois)}…

Expira em ${esc(new Date(r.expiresAt).toLocaleString(\"pt-BR\"))}

`\n : `Não renovou\n

Resposta do Bitrix: ${esc(erroBitrix)}

invalid_client — client_id ou client_secret errado nas variáveis de ambiente.
invalid_grant — o refresh_token não pertence a estas credenciais (ex.: foi emitido pelo app antigo) ou já passou dos 180 dias.

`}\n

← portais

`));\n});\n\n// Diagnostico: confirma que o token OAuth do tenant realmente chama a API.\napp.get(\"/admin/test\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n const memberId = c.req.query(\"member_id\") ?? \"\";\n const key = c.req.query(\"key\")!;\n\n const bx = await TenantBitrix.forTenant(memberId);\n if (!bx) return c.html(layout(\"Erro\", \"

Sem token para este portal

\"), 400);\n\n // Chamadas somente-leitura, nao alteram nada no portal do cliente.\n const info = await bx.call(\"app.info\");\n const lines = await bx.call(\"voximplant.line.get\");\n const users = await bx.call(\"user.current\");\n\n const fmt = (label: string, r: any) => `\n

\n ${esc(label)}\n

${esc(JSON.stringify(r?.result ?? r, null, 2))}

`;\n\n return c.html(layout(\"Diagnóstico\", `\n

Diagnóstico OAuth

${esc(memberId)}

\n ${fmt(\"app.info (escopo e status do app)\", info)}\n ${fmt(\"voximplant.line.get (linhas de telefonia)\", lines)}\n ${fmt(\"user.current (usuário do token)\", users)}\n

← portais

`));\n});\n\napp.post(\"/admin/provision\", async (c) => {\n if (!adminOk(c)) return c.text(\"Não autorizado\", 401);\n\n // parseBody() do Hono se mostrou pouco confiavel aqui; parse manual do corpo.\n const raw = await c.req.text();\n const form = new URLSearchParams(raw);\n const memberId = (form.get(\"member_id\") ?? \"\").trim();\n const server = (form.get(\"server\") ?? \"\").trim();\n const login = (form.get(\"login\") ?? \"\").trim();\n const password = (form.get(\"password\") ?? \"\").trim();\n const title = (form.get(\"title\") ?? \"DualWin Call\").trim();\n const key = c.req.query(\"key\")!;\n\n const bx = await TenantBitrix.forTenant(memberId);\n if (!bx) {\n await log(memberId || null, null, \"provision_no_token\", {\n memberIdRecebido: memberId,\n camposRecebidos: [...form.keys()],\n });\n return c.html(layout(\"Erro\", `

Sem token válido

member_id recebido: ${esc(memberId || \"(vazio)\")}

O cliente precisa reinstalar o app.

`), 400);\n }\n\n const prov = await provisionSipTrunk(bx, { server, login, password, title });\n if (!prov.ok) {\n await log(memberId, null, \"provision_failed\", prov.error);\n return c.html(layout(\"Falha\", `

Falha ao provisionar

${esc(prov.error)}

← tentar de novo

`));\n }\n\n const reg = await waitForRegistration(bx, prov.configId!, prov.regId!);\n\n await saveSip({\n memberId,\n configId: prov.configId!,\n regId: prov.regId!,\n server, login, password,\n registrationStatus: reg.statusCode,\n lineTitle: title,\n provisionedBy: \"admin\",\n });\n await log(memberId, null, \"provisioned\", { configId: prov.configId, reg });\n\n const lines = await listLines(bx);\n\n return c.html(layout(\"Provisionado\", `\n

${reg.registered ? \"Linha ativa\" : \"Provisionada, registro pendente\"}

Status do registro: ${esc(reg.statusCode ?? \"—\")} ${reg.registered ? '200 OK' : `${esc(reg.error ?? \"verificar\")}`}

Linhas no portal: ${esc(JSON.stringify(lines))}

← portais

`));\n});\n\napp.get(\"/health\", (c) => c.json({ ok: true, app: \"dualwin-call\" }));\n\nexport default app.fetch;\n","dualwin-call",[150],"cb92f5bf-0fd0-41a8-a79c-ba40386a4541","gen_session.ts","3d080038-8d84-11f1-982e-1607ee4eb77e",23,["D",1785573452408],"// Utilitario de desenvolvimento: gera uma sessao assinada para testar as telas\n// do cliente sem precisar abrir pelo Bitrix. Remover antes de produzir.\nimport { createSession } from \"./session.ts\";\n\nconst sid = await createSession(\"98181653441a68555da7ba1102d6aca6\");\nconsole.log(sid);\n",[158],"6904c3d6-34a7-4f48-8df1-6533836d637f","db.ts","afe92446-8d80-11f1-8bd8-1607ee4eb77e",25,["D",1785599241345],"/**\n * Persistencia multi-tenant. Cada portal Bitrix que instala o app vira um\n * registro em `tenants`, identificado por member_id (estavel; o dominio pode\n * mudar se o cliente renomear o portal).\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport interface Tenant {\n member_id: string;\n domain: string;\n access_token: string | null;\n refresh_token: string | null;\n token_expires_at: number | null;\n installed_at: string | null;\n status: string;\n company_name: string | null;\n installed_by_name: string | null;\n installed_by_email: string | null;\n}\n\nexport interface TenantSip {\n member_id: string;\n config_id: string | null;\n reg_id: string | null;\n sip_server: string | null;\n sip_login: string | null;\n sip_password: string | null;\n registration_status: string | null;\n configured_at: string | null;\n line_title: string | null;\n provisioned_by: string | null;\n}\n\nexport async function upsertTenant(t: {\n memberId: string;\n domain: string;\n accessToken: string;\n refreshToken: string;\n expiresAt: number;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO tenants (member_id, domain, access_token, refresh_token, token_expires_at, installed_at, status)\n VALUES (?, ?, ?, ?, ?, ?, 'installed')\n ON CONFLICT(member_id) DO UPDATE SET\n domain = excluded.domain,\n access_token = excluded.access_token,\n refresh_token = excluded.refresh_token,\n token_expires_at = excluded.token_expires_at,\n status = 'installed'`,\n args: [t.memberId, t.domain, t.accessToken, t.refreshToken, t.expiresAt, new Date().toISOString()],\n });\n}\n\nexport async function getTenant(memberId: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tenants WHERE member_id = ?\",\n args: [memberId],\n });\n return (r.rows[0] as unknown as Tenant) ?? null;\n}\n\nexport async function getTenantByDomain(domain: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tenants WHERE domain = ?\",\n args: [domain],\n });\n return (r.rows[0] as unknown as Tenant) ?? null;\n}\n\nexport async function listTenants(): Promise>> {\n const r = await sqlite.execute(`\n SELECT t.*, s.config_id, s.reg_id, s.registration_status, s.line_title, s.configured_at\n FROM tenants t\n LEFT JOIN tenant_sip s ON s.member_id = t.member_id\n ORDER BY t.installed_at DESC\n `);\n return r.rows as unknown as Array>;\n}\n\nexport async function updateTokens(\n memberId: string,\n accessToken: string,\n refreshToken: string,\n expiresAt: number,\n): Promise {\n await sqlite.execute({\n sql: `UPDATE tenants SET access_token = ?, refresh_token = ?, token_expires_at = ? WHERE member_id = ?`,\n args: [accessToken, refreshToken, expiresAt, memberId],\n });\n}\n\nexport async function markUninstalled(memberId: string): Promise {\n await sqlite.execute({\n sql: \"UPDATE tenants SET status = 'uninstalled' WHERE member_id = ?\",\n args: [memberId],\n });\n}\n\nexport async function getSip(memberId: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT * FROM tenant_sip WHERE member_id = ?\",\n args: [memberId],\n });\n return (r.rows[0] as unknown as TenantSip) ?? null;\n}\n\nexport async function saveSip(s: {\n memberId: string;\n configId: string;\n regId: string;\n server: string;\n login: string;\n password: string;\n registrationStatus: string | null;\n lineTitle: string;\n provisionedBy: string;\n}): Promise {\n await sqlite.execute({\n sql: `INSERT INTO tenant_sip\n (member_id, config_id, reg_id, sip_server, sip_login, sip_password,\n registration_status, configured_at, line_title, provisioned_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(member_id) DO UPDATE SET\n config_id = excluded.config_id,\n reg_id = excluded.reg_id,\n sip_server = excluded.sip_server,\n sip_login = excluded.sip_login,\n sip_password = excluded.sip_password,\n registration_status = excluded.registration_status,\n configured_at = excluded.configured_at,\n line_title = excluded.line_title,\n provisioned_by = excluded.provisioned_by`,\n args: [\n s.memberId, s.configId, s.regId, s.server, s.login, s.password,\n s.registrationStatus, new Date().toISOString(), s.lineTitle, s.provisionedBy,\n ],\n });\n}\n\n/** Consulta generica — usada pelas telas que so leem dados. */\nexport async function sqliteQuery(\n sql: string,\n args: Array = [],\n): Promise[]> {\n const r = await sqlite.execute({ sql, args });\n return r.rows as unknown as Record[];\n}\n\nexport async function log(\n memberId: string | null,\n domain: string | null,\n event: string,\n detail: unknown,\n): Promise {\n const text = typeof detail === \"string\" ? detail : JSON.stringify(detail);\n console.log(`[${event}] ${domain ?? \"-\"} ${memberId ?? \"-\"}: ${text?.substring(0, 300)}`);\n await sqlite.execute({\n sql: \"INSERT INTO install_log (member_id, domain, event, detail, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [memberId, domain, event, text?.substring(0, 2000) ?? null, new Date().toISOString()],\n });\n}\n",[165],"027f014a-3d2c-4964-884f-6c7a4c57c514","dashboard.ts","e65dfe40-8d83-11f1-b222-1607ee4eb77e",16,["D",1785573307024],"/**\n * Dashboard de chamadas — le do portal do cliente via voximplant.statistic.get.\n *\n * Campos relevantes observados na pratica (2026-08-01):\n * PORTAL_NUMBER, PHONE_NUMBER, CALL_TYPE (1=saida 2=entrada),\n * CALL_DURATION, CALL_START_DATE, CALL_FAILED_CODE (200=atendida),\n * COST/COST_CURRENCY, CRM_ENTITY_TYPE/ID, CALL_RECORD_URL, RECORD_FILE_ID,\n * TRANSCRIPT_PENDING, PORTAL_USER_ID\n */\n\nexport interface CallFilters {\n from?: string; // YYYY-MM-DD\n to?: string; // YYYY-MM-DD\n direction?: string; // \"1\" saida | \"2\" entrada | \"\" todas\n line?: string; // PORTAL_NUMBER\n onlyAnswered?: boolean;\n phone?: string;\n}\n\nexport interface CallRow {\n id: string;\n startDate: string;\n phone: string;\n type: string;\n duration: number;\n answered: boolean;\n failedCode: string;\n cost: number;\n currency: string;\n line: string;\n userId: string;\n recordUrl: string;\n hasRecord: boolean;\n crmType: string;\n crmId: string;\n}\n\nexport interface CallStats {\n total: number;\n answered: number;\n missed: number;\n totalSeconds: number;\n avgSeconds: number;\n withRecording: number;\n totalCost: number;\n answerRate: number;\n}\n\ninterface Bx { call(m: string, p?: Record): Promise }\n\nexport async function fetchCalls(bx: Bx, f: CallFilters): Promise {\n const filter: Record = {};\n\n if (f.from) filter[\">=CALL_START_DATE\"] = `${f.from}T00:00:00`;\n if (f.to) filter[\"<=CALL_START_DATE\"] = `${f.to}T23:59:59`;\n if (f.direction) filter[\"CALL_TYPE\"] = f.direction;\n if (f.line) filter[\"PORTAL_NUMBER\"] = f.line;\n if (f.phone) filter[\"PHONE_NUMBER\"] = f.phone;\n\n // Pagina ate 500 registros — suficiente para o painel; alem disso o cliente\n // usa os relatorios nativos do Bitrix.\n let rows: any[] = [];\n let start = 0;\n for (let page = 0; page < 10; page++) {\n const resp = await bx.call(\"voximplant.statistic.get\", {\n FILTER: filter,\n SORT: \"CALL_START_DATE\",\n ORDER: \"DESC\",\n start,\n });\n const batch = resp?.result ?? [];\n rows = rows.concat(batch);\n if (!resp?.next || rows.length >= 500) break;\n start = resp.next;\n }\n\n let mapped: CallRow[] = rows.map((c) => ({\n id: String(c.ID ?? c.CALL_ID ?? \"\"),\n startDate: String(c.CALL_START_DATE ?? \"\"),\n phone: String(c.PHONE_NUMBER ?? \"\"),\n type: String(c.CALL_TYPE ?? \"\"),\n duration: Number(c.CALL_DURATION ?? 0),\n answered: String(c.CALL_FAILED_CODE ?? \"\") === \"200\",\n failedCode: String(c.CALL_FAILED_CODE ?? \"\"),\n cost: Number(c.COST ?? 0),\n currency: String(c.COST_CURRENCY ?? \"\"),\n line: String(c.PORTAL_NUMBER ?? \"\"),\n userId: String(c.PORTAL_USER_ID ?? \"\"),\n recordUrl: String(c.CALL_RECORD_URL ?? \"\"),\n hasRecord: Boolean(c.RECORD_FILE_ID),\n crmType: String(c.CRM_ENTITY_TYPE ?? \"\"),\n crmId: String(c.CRM_ENTITY_ID ?? \"\"),\n }));\n\n // O filtro de \"atendida\" nao existe na API; aplicamos aqui.\n if (f.onlyAnswered) mapped = mapped.filter((c) => c.answered);\n\n return mapped;\n}\n\nexport function computeStats(calls: CallRow[]): CallStats {\n const answered = calls.filter((c) => c.answered);\n const totalSeconds = answered.reduce((s, c) => s + c.duration, 0);\n return {\n total: calls.length,\n answered: answered.length,\n missed: calls.length - answered.length,\n totalSeconds,\n avgSeconds: answered.length ? Math.round(totalSeconds / answered.length) : 0,\n withRecording: calls.filter((c) => c.hasRecord).length,\n totalCost: calls.reduce((s, c) => s + c.cost, 0),\n answerRate: calls.length ? Math.round((answered.length / calls.length) * 100) : 0,\n };\n}\n\nexport function formatDuration(sec: number): string {\n if (!sec) return \"—\";\n const m = Math.floor(sec / 60);\n const s = sec % 60;\n return m ? `${m}m ${String(s).padStart(2, \"0\")}s` : `${s}s`;\n}\n\n/** Traduz o codigo de desligamento do Bitrix. */\nexport function failureLabel(code: string): string {\n const map: Record = {\n \"200\": \"Atendida\",\n \"304\": \"Não atendida\",\n \"486\": \"Ocupado\",\n \"603\": \"Recusada\",\n \"603-S\": \"Cancelada\",\n \"404\": \"Número inválido\",\n \"480\": \"Indisponível\",\n \"402\": \"Saldo insuficiente\",\n \"403\": \"Proibido\",\n \"423\": \"Bloqueado\",\n };\n return map[code] ?? (code || \"—\");\n}\n",[172],"a688ba0e-ee34-4f25-aec8-f84b3df830b3","bitrix.ts","e5a77876-8d80-11f1-a006-1607ee4eb77e",["D",1786411620249],2,"/**\n * Cliente REST do Bitrix24 para app OAuth (multi-tenant).\n *\n * Diferencas em relacao ao webhook:\n * - URL sem prefixo de usuario: https://DOMINIO/rest/{metodo}.json\n * - token vai no CORPO, no campo `auth` (a forma ?auth= na query nao e documentada)\n * - access_token expira em 1h; refresh_token dura 180 dias e MUDA a cada\n * renovacao, entao o novo precisa ser persistido.\n */\n\nimport { getTenant, updateTokens, log } from \"./db.ts\";\n\nconst OAUTH_TOKEN_URL = \"https://oauth.bitrix.info/oauth/token/\";\n\n// Credenciais do app TIRAGEM (marketplace). As BITRIX_CLIENT_* antigas eram do\n// app local, que so funcionava no portal DualWin — ficam como fallback.\nconst CLIENT_ID = Deno.env.get(\"BITRIX_APP_CLIENT_ID\")\n ?? Deno.env.get(\"BITRIX_CLIENT_ID\") ?? \"\";\nconst CLIENT_SECRET = Deno.env.get(\"BITRIX_APP_CLIENT_SECRET\")\n ?? Deno.env.get(\"BITRIX_CLIENT_SECRET\") ?? \"\";\n\nexport interface AuthPayload {\n access_token: string;\n refresh_token: string;\n expires_in?: number | string;\n member_id: string;\n domain?: string;\n client_endpoint?: string;\n application_token?: string;\n}\n\n/** Renova o par de tokens. Retorna null se o refresh_token tambem expirou. */\nexport async function refreshTokens(\n memberId: string,\n refreshToken: string,\n): Promise<{ accessToken: string; refreshToken: string; expiresAt: number } | null> {\n if (!CLIENT_ID || !CLIENT_SECRET) {\n throw new Error(\"BITRIX_CLIENT_ID/BITRIX_CLIENT_SECRET nao configurados\");\n }\n\n const qs = new URLSearchParams({\n grant_type: \"refresh_token\",\n client_id: CLIENT_ID,\n client_secret: CLIENT_SECRET,\n refresh_token: refreshToken,\n });\n\n const res = await fetch(`${OAUTH_TOKEN_URL}?${qs}`);\n const json = await res.json().catch(() => null);\n\n if (!json?.access_token) {\n await log(memberId, null, \"token_refresh_failed\", json);\n return null;\n }\n\n const expiresAt = Date.now() + Number(json.expires_in ?? 3600) * 1000;\n await updateTokens(memberId, json.access_token, json.refresh_token, expiresAt);\n\n return {\n accessToken: json.access_token,\n refreshToken: json.refresh_token,\n expiresAt,\n };\n}\n\n/**\n * Cliente amarrado a um tenant. Renova o token sozinho quando perto de expirar\n * e tambem quando o Bitrix devolve expired_token no meio de uma chamada.\n */\nexport class TenantBitrix {\n constructor(\n private memberId: string,\n private domain: string,\n private accessToken: string,\n private refreshToken: string,\n private expiresAt: number,\n ) {}\n\n static async forTenant(memberId: string): Promise {\n const t = await getTenant(memberId);\n if (!t?.access_token || !t.refresh_token) return null;\n return new TenantBitrix(\n t.member_id,\n t.domain,\n t.access_token,\n t.refresh_token,\n t.token_expires_at ?? 0,\n );\n }\n\n private async ensureFreshToken(): Promise {\n // margem de 5 min para nao correr o risco de expirar durante a chamada\n if (Date.now() < this.expiresAt - 5 * 60 * 1000) return true;\n\n const renewed = await refreshTokens(this.memberId, this.refreshToken);\n if (!renewed) return false;\n\n this.accessToken = renewed.accessToken;\n this.refreshToken = renewed.refreshToken;\n this.expiresAt = renewed.expiresAt;\n return true;\n }\n\n async call(method: string, params: Record = {}): Promise {\n if (!(await this.ensureFreshToken())) {\n return { error: \"token_expired\", error_description: \"Reinstale o app no portal\" };\n }\n\n const doCall = async (token: string) => {\n const res = await fetch(`https://${this.domain}/rest/${method}.json`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ ...params, auth: token }),\n });\n return res.json().catch(() => null);\n };\n\n let json = await doCall(this.accessToken);\n\n // O token pode ter sido invalidado fora do nosso controle.\n if (json?.error === \"expired_token\" || json?.error === \"invalid_token\") {\n const renewed = await refreshTokens(this.memberId, this.refreshToken);\n if (!renewed) {\n return { error: \"token_expired\", error_description: \"Reinstale o app no portal\" };\n }\n this.accessToken = renewed.accessToken;\n this.refreshToken = renewed.refreshToken;\n this.expiresAt = renewed.expiresAt;\n json = await doCall(this.accessToken);\n }\n\n // Log de qualquer erro, para nao repetir o problema de assumir sucesso.\n if (json?.error) {\n await log(this.memberId, this.domain, \"rest_error\", { method, resp: json });\n }\n\n return json;\n }\n}\n\n/**\n * Extrai o payload de auth de um POST do frame.\n *\n * Atencao: na pratica o Bitrix NEM SEMPRE envia DOMAIN (observado em 2026-08-01\n * num Local App: vieram AUTH_ID, REFRESH_ID, member_id, PLACEMENT, etc, sem\n * DOMAIN). Por isso aceitamos um fallback vindo do cabecalho Referer/Origin do\n * iframe, que aponta para o portal.\n */\nexport function authFromFrameForm(\n form: URLSearchParams,\n fallbackDomain?: string | null,\n): AuthPayload | null {\n const accessToken = form.get(\"AUTH_ID\");\n const refreshToken = form.get(\"REFRESH_ID\");\n const memberId = form.get(\"member_id\");\n const domain = form.get(\"DOMAIN\") ?? fallbackDomain ?? null;\n\n if (!accessToken || !refreshToken || !memberId || !domain) return null;\n\n return {\n access_token: accessToken,\n refresh_token: refreshToken,\n expires_in: form.get(\"AUTH_EXPIRES\") ?? 3600,\n member_id: memberId,\n domain,\n };\n}\n\n/** Deriva o dominio do portal a partir dos cabecalhos da requisicao. */\nexport function domainFromHeaders(req: Request): string | null {\n for (const h of [\"referer\", \"origin\"]) {\n const v = req.headers.get(h);\n if (!v) continue;\n try {\n const host = new URL(v).hostname;\n if (host.includes(\"bitrix24\")) return host;\n } catch (_) { /* ignora url malformada */ }\n }\n return null;\n}\n",[179],"c9f8f205-2144-4fe3-982e-ae5df13c5d8d","asaas.ts","b4a78406-8dc0-11f1-b340-1607ee4eb77e",27,["D",1785599422921],"/**\n * Integracao Asaas — cobranca recorrente via checkout hospedado.\n *\n * Decisoes de projeto, todas ancoradas na doc oficial:\n * - Usamos POST /v3/checkouts com chargeTypes RECURRENT: o cartao e digitado\n * na pagina do Asaas, nunca no nosso servidor (sem responsabilidade PCI).\n * - Liberamos o servico em PAYMENT_CONFIRMED (cliente pagou), NAO em\n * PAYMENT_RECEIVED (repasse financeiro, pode levar ate 32 dias no cartao).\n * - A successUrl do checkout serve so para UX; quem confirma e o webhook.\n * - Webhook e at-least-once: tratamos idempotencia pelo id do evento.\n */\n\nconst API_KEY = Deno.env.get(\"ASAAS_API_KEY\") ?? \"\";\nconst WEBHOOK_TOKEN = Deno.env.get(\"ASAAS_WEBHOOK_TOKEN\") ?? \"\";\n// Sandbox por padrao: so vai para producao com a variavel explicita.\nconst IS_PROD = Deno.env.get(\"ASAAS_ENV\") === \"production\";\nconst BASE = IS_PROD ? \"https://api.asaas.com/v3\" : \"https://api-sandbox.asaas.com/v3\";\n\nexport const asaasConfigured = () => Boolean(API_KEY);\nexport const asaasEnv = () => (IS_PROD ? \"production\" : \"sandbox\");\n\nasync function req(path: string, init: RequestInit = {}): Promise {\n if (!API_KEY) throw new Error(\"ASAAS_API_KEY não configurada\");\n\n const res = await fetch(`${BASE}${path}`, {\n ...init,\n headers: {\n \"Content-Type\": \"application/json\",\n \"User-Agent\": \"DualWinCall\",\n \"access_token\": API_KEY,\n ...(init.headers ?? {}),\n },\n });\n\n const json = await res.json().catch(() => null);\n console.log(`[asaas] ${init.method ?? \"GET\"} ${path} -> ${res.status}`,\n JSON.stringify(json)?.substring(0, 400));\n\n if (!res.ok) {\n const msg = json?.errors?.[0]?.description ?? `HTTP ${res.status}`;\n throw new Error(`Asaas: ${msg}`);\n }\n return json;\n}\n\nexport interface CheckoutInput {\n planName: string;\n planDescription: string;\n valueReais: number; // valor em reais (o Asaas usa decimal, nao centavos)\n cycle: string; // MONTHLY, YEARLY...\n externalReference: string;\n successUrl: string;\n cancelUrl: string;\n expiredUrl: string;\n customer?: { name?: string; email?: string; cpfCnpj?: string };\n}\n\n/** Cria a sessao de checkout e devolve o link para onde redirecionar o cliente. */\nexport async function createCheckout(i: CheckoutInput): Promise<{ id: string; link: string }> {\n const amanha = new Date(Date.now() + 864e5).toISOString().slice(0, 19).replace(\"T\", \" \");\n\n const body: Record = {\n billingTypes: [\"CREDIT_CARD\", \"PIX\"],\n chargeTypes: [\"RECURRENT\"],\n minutesToExpire: 60,\n externalReference: i.externalReference,\n callback: {\n successUrl: i.successUrl,\n cancelUrl: i.cancelUrl,\n expiredUrl: i.expiredUrl,\n },\n subscription: {\n cycle: i.cycle,\n nextDueDate: amanha,\n },\n items: [{\n name: i.planName,\n description: i.planDescription,\n quantity: 1,\n value: i.valueReais,\n }],\n };\n\n // Pre-preenche os dados do pagador quando conhecidos (melhora conversao).\n const cd: Record = {};\n if (i.customer?.name) cd.name = i.customer.name;\n if (i.customer?.email) cd.email = i.customer.email;\n if (i.customer?.cpfCnpj) cd.cpfCnpj = i.customer.cpfCnpj;\n if (Object.keys(cd).length) body.customerData = cd;\n\n const r = await req(\"/checkouts\", { method: \"POST\", body: JSON.stringify(body) });\n\n const link = r?.link ?? (r?.id\n ? `https://${IS_PROD ? \"www.asaas.com\" : \"sandbox.asaas.com\"}/checkoutSession/show?id=${r.id}`\n : null);\n\n if (!link) throw new Error(\"Asaas não retornou link de checkout\");\n return { id: String(r.id), link: String(link) };\n}\n\n/** Cancela uma sessao de checkout ainda nao paga. */\nexport async function cancelCheckout(id: string): Promise {\n try {\n await req(`/checkouts/${id}/cancel`, { method: \"POST\" });\n return true;\n } catch (_) {\n return false;\n }\n}\n\n/**\n * Valida o webhook pelo header `asaas-access-token`, que ecoa o authToken\n * cadastrado. Comparacao em tempo constante para nao vazar o token por timing.\n */\nexport function verifyWebhook(req_: Request): boolean {\n if (!WEBHOOK_TOKEN) return false;\n const got = req_.headers.get(\"asaas-access-token\") ?? \"\";\n if (got.length !== WEBHOOK_TOKEN.length) return false;\n let diff = 0;\n for (let i = 0; i < got.length; i++) diff |= got.charCodeAt(i) ^ WEBHOOK_TOKEN.charCodeAt(i);\n return diff === 0;\n}\n\n/** Eventos que liberam o servico. */\nexport const EVENTOS_LIBERA = new Set([\"PAYMENT_CONFIRMED\"]);\n/** Eventos que suspendem o servico. */\nexport const EVENTOS_SUSPENDE = new Set([\n \"PAYMENT_OVERDUE\",\n \"PAYMENT_REFUNDED\",\n \"PAYMENT_CHARGEBACK_REQUESTED\",\n \"SUBSCRIPTION_INACTIVATED\",\n \"SUBSCRIPTION_DELETED\",\n]);\n",[186],"pulls","forks","envVars",{"_198":200,"_201":54},"connections",{"_198":54,"_199":54},"count","unfilledCount",5,"emptyCount",{"_20":185,"_13":186,"_126":187,"_128":-5,"_129":21,"_130":188,"_132":50,"_22":232,"_29":54,"_134":135,"_136":190,"_138":38,"_139":-5,"_211":233,"_94":234},{"_20":178,"_13":179,"_126":180,"_128":-5,"_129":21,"_130":152,"_132":50,"_22":229,"_29":182,"_134":135,"_136":183,"_138":38,"_139":-5,"_211":230,"_94":231},{"_20":171,"_13":172,"_126":173,"_128":-5,"_129":21,"_130":174,"_132":50,"_22":226,"_29":54,"_134":135,"_136":176,"_138":38,"_139":-5,"_211":227,"_94":228},{"_20":164,"_13":165,"_126":166,"_128":-5,"_129":21,"_130":167,"_132":50,"_22":223,"_29":146,"_134":135,"_136":169,"_138":38,"_139":-5,"_211":224,"_94":225},{"_20":157,"_13":158,"_126":159,"_128":-5,"_129":21,"_130":160,"_132":50,"_22":220,"_29":54,"_134":135,"_136":162,"_138":38,"_139":-5,"_211":221,"_94":222},{"_20":149,"_13":150,"_126":48,"_128":-5,"_129":21,"_130":30,"_132":50,"_22":217,"_29":152,"_134":153,"_136":154,"_138":38,"_139":155,"_211":218,"_94":219},{"_20":141,"_13":142,"_126":143,"_128":-5,"_129":21,"_130":144,"_132":50,"_22":214,"_29":146,"_134":135,"_136":147,"_138":38,"_139":-5,"_211":215,"_94":216},{"_20":124,"_13":125,"_126":127,"_128":-5,"_129":21,"_130":131,"_132":50,"_22":210,"_29":54,"_134":135,"_136":137,"_138":38,"_139":-5,"_211":212,"_94":213},["D",1785573273904],"children",[],[125],["D",1785573056795],[],[142],["D",1787083160226],[],[150],["D",1785573452408],[],[158],["D",1785599241345],[],[165],["D",1785573307024],[],[172],["D",1786411620249],[],[179],["D",1785599422921],[],[186],["D",1785571745736],["D",1789566041074],{"_11":12,"_92":88},{"_11":12,"_85":86,"_87":88,"_45":46,"_89":90,"_91":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_80":-5,"_81":-5,"_82":-5,"_83":14,"_84":12},"ctx",{"_73":-5,"_113":273,"_274":275,"_276":277,"_278":38,"_279":38,"_280":38,"_281":50,"_282":-5,"_283":-7,"_284":-7,"_285":54,"_286":38,"_287":38,"_288":-5,"_289":38,"_290":38,"_291":38,"_292":-5},"ENV",{"_244":245,"_246":247,"_248":26,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1